← All credits
Jarno Vos (jrn5151) | Patchstack Bug Bounty Program
33 vulnerability records and advisories credit this contributor.
CVE-2026-39591
WordPress WP-BusinessDirectory plugin <= 4.0.0 - Arbitrary File Upload vulnerability
CVE-2026-39583
WordPress Datalogics Ecommerce Delivery plugin <= 2.6.62 - Privilege Escalation vulnerability
CVE-2026-39587
WordPress WP BASE Booking plugin <= 5.9.0 - Privilege Escalation vulnerability
CVE-2025-69411
WordPress ionCube tester plus plugin <= 1.3 - Arbitrary File Download vulnerability
CVE-2025-69324
WordPress NEX-Forms plugin <= 9.1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68881
WordPress AppExperts plugin <= 1.4.5 - SQL Injection vulnerability
CVE-2025-68866
WordPress Dinatur plugin <= 1.18 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67544
WordPress Shopkeeper Extender plugin < 7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27073
WordPress Addi – Cuotas que se adaptan a ti plugin <= 2.0.4 - Broken Authentication vulnerability
CVE-2026-25438
WordPress Gutenberg Blocks – Unlimited blocks For Gutenberg plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability