GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Muhammad Yudha - DJ | Patchstack Bug Bounty Program

359 vulnerability records and advisories credit this contributor.

CVE-2026-27427
WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62745
WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68075
WordPress BNE Testimonials plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57431
WordPress Featured Image plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68074
WordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability
CVE-2025-60040
WordPress wp-mpdf Plugin <= 3.9.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58702
WordPress MarketKing Plugin <= 2.0.92 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58652
WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58263
WordPress BuddyPress Notification Widget Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58654
WordPress xili-language Plugin <= 2.21.3 - Cross Site Scripting (XSS) Vulnerability