← All credits
Jakub Herman | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-56060
WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 7.1.1 - Sensitive Data Exposure vulnerability
CVE-2026-54802
WordPress SMS Alert Order Notifications plugin <= 3.9.3 - Broken Authentication vulnerability
CVE-2026-52698
WordPress PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
CVE-2026-54817
WordPress MStore API plugin <= 4.18.4 - Broken Authentication vulnerability
CVE-2026-49767
WordPress wpForo Forum plugin <= 3.1.0 - Broken Authentication vulnerability
CVE-2026-54184
WordPress Clean Login plugin <= 1.15 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-40773
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.9 - Broken Access Control vulnerability
CVE-2026-34892
WordPress Rank Math SEO plugin <= 1.0.271 - Broken Access Control vulnerability
CVE-2026-40766
WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability
CVE-2026-42660
WordPress Contest Gallery plugin <= 28.1.7 - Sensitive Data Exposure vulnerability