← All credits
Bao - BlueRock | Patchstack Bug Bounty Program
81 vulnerability records and advisories credit this contributor.
CVE-2025-58825
WordPress Comment Form WP – Customize Default Comment Form plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-58866
WordPress Site Info Plugin <= 1.1 - Sensitive Data Exposure Vulnerability
CVE-2025-58613
WordPress Posts Table with Search & Sort Plugin <= 1.4.10 - Broken Access Control Vulnerability
CVE-2025-58599
WordPress Order Delivery Date for WooCommerce Plugin <= 4.1.0 - Broken Access Control Vulnerability
CVE-2025-54730
WordPress Embedder for Google Reviews Plugin <= 1.7.3 - Broken Access Control Vulnerability
CVE-2026-25436
WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability
CVE-2026-40742
WordPress Nelio AB Testing plugin <= 8.2.8 - Sensitive Data Exposure vulnerability
CVE-2026-40763
WordPress Royal Elementor Addons plugin <= 1.7.1056 - Broken Access Control vulnerability
CVE-2026-39563
WordPress Share This Image plugin <= 2.12 - Broken Access Control vulnerability
CVE-2026-39535
WordPress Display Eventbrite Events plugin <= 6.5.6 - Broken Access Control vulnerability