← All credits
Muhamad Agil Fachrian | Patchstack Bug Bounty Program
50 vulnerability records and advisories credit this contributor.
CVE-2024-49677
WordPress Bootstrap Buttons plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-54387
WordPress Posts Date Ranges plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-54386
WordPress Push Monkey Pro plugin <= 3.9 - CSRF to Stored XSS vulnerability
CVE-2024-52484
WordPress Wc Recently viewed products plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-50504
WordPress Bulk Change Role plugin <= 1.1 - Privilege Escalation vulnerability
CVE-2024-49623
WordPress Duplicate Title Validate plugin <= 1.0 - SQL Injection vulnerability
CVE-2025-25093
WordPress Child Themes Helper plugin <= 2.2.7 - CSRF to Arbitrary File Deletion vulnerability
CVE-2025-24740
WordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability
CVE-2025-24741
WordPress KB Support plugin <= 1.6.7 - Open Redirection vulnerability
CVE-2025-23699
WordPress Event Countdown Timer Plugin by TechMix plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability