← All credits
Dimas Maulana | Patchstack Bug Bounty Program
80 vulnerability records and advisories credit this contributor.
CVE-2025-32921
WordPress Arrival theme <= 1.4.5 - Local File Inclusion vulnerability
CVE-2025-32639
WordPress Affiliate Links plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32526
WordPress Zephyr Project Manager plugin <= 3.3.101 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32519
WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability
CVE-2025-31537
WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 2.16 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31405
WordPress Fami WooCommerce Compare plugin <= 1.0.5 - Local File Inclusion vulnerability
CVE-2025-31387
WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability
CVE-2025-31006
WordPress Activity Reactions For Buddypress plugin <= 1.0.22 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-30835
WordPress Accounting for WooCommerce plugin <= 1.6.8 - Local File Inclusion vulnerability
CVE-2025-26993
WordPress Visual Website Collaboration Atarim plugin <= 4.1.0 - Reflected Cross Site Scripting (XSS) vulnerability