← All credits
Dimas Maulana | Patchstack Bug Bounty Program
80 vulnerability records and advisories credit this contributor.
CVE-2025-26757
WordPress FULL – Cliente plugin <= 3.1.26 - Local File Inclusion vulnerability
CVE-2025-48293
WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability
CVE-2025-39397
WordPress Anything Popup plugin <= 7.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-39399
WordPress License For Envato plugin <= 1.0.0 - Local File Inclusion vulnerability
CVE-2025-39387
WordPress Opstore theme <= 1.4.5 - Local File Inclusion vulnerability
CVE-2025-39382
WordPress ACF: Google Font Selector plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-39384
WordPress Product Lister for eBay plugin <= 2.0.9 - Local File Inclusion vulnerability
CVE-2025-39379
WordPress Capturly plugin <= 2.0.1 - Local File Inclusion vulnerability
CVE-2025-39378
WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Local File Inclusion vulnerability
CVE-2025-39360
WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability