← All credits
Muhamad Agil Fachrian | Patchstack Bug Bounty Program
50 vulnerability records and advisories credit this contributor.
CVE-2025-23690
WordPress Book a Place plugin <= 0.7.1 - CSRF to Stored XSS vulnerability
CVE-2025-23453
WordPress Stars SMTP Mailer plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23457
WordPress Shipdeo plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22784
WordPress Background Control plugin <= 1.0.5 - CSRF to Arbitrary File Deletion vulnerability
CVE-2025-22736
WordPress User Management plugin <= 1.2 - Privilege Escalation vulnerability
CVE-2025-22341
WordPress Hide Login+ plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56264
WordPress ACF City Selector plugin <= 1.14.0 - Arbitrary File Upload vulnerability
CVE-2024-56206
WordPress gap-hub-user-role. plugin <= 3.4.1 - CSRF to Broken Authentication vulnerability
CVE-2024-56022
WordPress Preloader by WordPress Monsters plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56013
WordPress Wovax IDX plugin <= 1.2.2 - Account Takeover vulnerability