← All credits
benzdeus | Patchstack Bug Bounty Program
50 vulnerability records and advisories credit this contributor.
CVE-2025-68497
WordPress Astra Widgets plugin <= 1.2.16 - Cross Site Scripting (XSS) vulnerability
CVE-2025-66095
WordPress KiviCare plugin <= 3.6.13 - SQL Injection vulnerability
CVE-2025-66086
WordPress SMS Alert Order Notifications plugin <= 3.8.8 - Broken Access Control vulnerability
CVE-2025-66078
WordPress Hotel Booking Lite plugin <= 5.2.3 - Remote Code Execution (RCE) vulnerability
CVE-2025-66054
WordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerability
CVE-2025-64631
WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerability
CVE-2025-64384
WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability
CVE-2025-64274
WordPress WPKoi Templates for Elementor plugin <= 3.4.4 - Broken Access Control vulnerability
CVE-2025-63001
WordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerability
CVE-2025-54004
WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.7.24 - Broken Access Control vulnerability