← All credits
Taylsec | Patchstack Bug Bounty Program
9 vulnerability records and advisories credit this contributor.
CVE-2026-73993
WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
CVE-2026-28142
WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability
CVE-2026-28176
WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability
CVE-2026-27538
WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability
CVE-2026-27543
WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerability
CVE-2026-61984
WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability
CVE-2026-65554
WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerability
CVE-2026-59540
WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability
CVE-2026-57718
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability