← All credits
dutafi | Patchstack Bug Bounty Program
67 vulnerability records and advisories credit this contributor.
CVE-2026-57691
WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.23.89 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57423
WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-57713
WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability
CVE-2026-59518
WordPress Directorist plugin <= 8.8.2 - PHP Object Injection vulnerability
CVE-2026-57394
WordPress Newsletters plugin <= 4.14 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57398
WordPress Real Estate Manager Pro plugin <= 12.8.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57422
WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-57682
WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57358
WordPress Customize My Account for WooCommerce plugin <= 4.3.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-57670
WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability