← All credits
haudayroi | Patchstack Bug Bounty Program
8 vulnerability records and advisories credit this contributor.
CVE-2025-49995
WordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-47542
WordPress Simple calendar for Elementor plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-47543
WordPress TrueBooker plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-46498
WordPress Zalo Official Live Chat plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-46249
WordPress Simple calendar for Elementor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-30977
WordPress Chaport <= 1.1.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-27360
WordPress Quick Event Calendar plugin <= 1.4.9 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-24772
WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Cross Site Request Forgery (CSRF) Vulnerability