← All credits
Jarno Vos (jrn5151) | Patchstack Bug Bounty Program
33 vulnerability records and advisories credit this contributor.
CVE-2026-25470
WordPress ACPT (Pro) - Custom Post Types plugin for WordPress plugin < 2.0.52 - Remote Code Execution (RCE) vulnerability
CVE-2026-73185
WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability
CVE-2026-57650
WordPress Magazine Blocks plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25446
WordPress WishList Member X plugin <= 3.29.0 - Arbitrary File Upload vulnerability
CVE-2026-40724
WordPress Client Portal (Pro) plugin <= 5.6.2 - Arbitrary File Download vulnerability
CVE-2026-34901
WordPress iControlWP plugin <= 5.5.3 - Privilege Escalation vulnerability
CVE-2026-39591
WordPress WP-BusinessDirectory plugin <= 4.0.0 - Arbitrary File Upload vulnerability
CVE-2026-39583
WordPress Datalogics Ecommerce Delivery plugin <= 2.6.62 - Privilege Escalation vulnerability
CVE-2026-39587
WordPress WP BASE Booking plugin <= 5.9.0 - Privilege Escalation vulnerability
CVE-2025-68060
WordPress Team Member plugin <= 8.5 - SQL Injection vulnerability