← All credits
Skalucy | Patchstack Bug Bounty Program
154 vulnerability records and advisories credit this contributor.
CVE-2025-31768
WordPress Widget Manager Light plugin <= 1.18 - Broken Access Control vulnerability
CVE-2025-31459
WordPress Login Alert plugin <= 0.2.1 - CSRF to Stored XSS vulnerability
CVE-2025-31460
WordPress OmniLeads Scripts and Tags Manager plugin <= 1.3 - CSRF to Stored XSS vulnerability
CVE-2025-31454
WordPress Delete Post Revision plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31446
WordPress WP Cleaner plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31445
WordPress Pages Order plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31440
WordPress Terms of Use plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-31375
WordPress Scheduled plugin <= 1.0 - CSRF to Stored XSS vulnerability
CVE-2025-31079
WordPress Usermaven plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-31034
WordPress Customize Login Page plugin <= 1.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability