← All credits
Hakiduck | Patchstack Bug Bounty Program
27 vulnerability records and advisories credit this contributor.
CVE-2025-22665
WordPress RapidLoad plugin <= 2.4.4 - Broken Access Control vulnerability
CVE-2024-54207
WordPress WordPress Auction Plugin plugin <= 3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-53783
WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability
CVE-2024-52427
WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability
CVE-2024-49691
WordPress Product Filter by WBW plugin <= 2.7.0 - SQL Injection vulnerability
CVE-2024-49244
WordPress SV Product Import Export for WooCommerce plugin <= 1.0.0 - SQL Injection vulnerability
CVE-2025-32137
WordPress s2Member plugin <= 250419 - Local File Inclusion vulnerability
CVE-2025-26988
WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - SQL Injection vulnerability
CVE-2025-26984
WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22349
WordPress WordPress Auction Plugin plugin <= 3.7 - SQL Injection vulnerability