← All credits
Dimas Maulana | Patchstack Bug Bounty Program
80 vulnerability records and advisories credit this contributor.
CVE-2025-26987
WordPress Frontend Admin by DynamiApps plugin <= 3.25.17 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26981
WordPress Web Accessibility By accessiBe plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26979
WordPress Funnel Builder by FunnelKit plugin <= 3.9.0 - Local File Inclusion vulnerability
CVE-2025-26954
WordPress ZooEffect plugin <= 1.11 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26933
WordPress Place Order Without Payment for WooCommerce plugin <= 2.6.7 - Local File Inclusion vulnerability
CVE-2025-26909
WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability
CVE-2025-26894
WordPress Coming Soon, Maintenance Mode plugin <= 1.1.1 - Local File Inclusion vulnerability
CVE-2025-26889
WordPress hockeydata LOS plugin <= 1.2.4 - Local File Inclusion vulnerability
CVE-2025-26890
WordPress HUSKY plugin <= 1.3.6.4 - Local File Inclusion vulnerability
CVE-2025-26748
WordPress Arkhe theme <= 3.12.0 - CSRF to Local File Inclusion vulnerability