← All credits
mcdruid | Patchstack Bug Bounty Program
40 vulnerability records and advisories credit this contributor.
CVE-2025-64227
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability
CVE-2026-22333
WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability
CVE-2026-27984
WordPress Widget Options plugin <= 4.1.3 - Remote Code Execution (RCE) vulnerability
CVE-2026-25345
WordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerability
CVE-2025-68897
WordPress IF AS Shortcode plugin <= 1.2 - Remote Code Execution (RCE) vulnerability
CVE-2025-68865
WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability
CVE-2025-67962
WordPress Broken Link Checker plugin <= 1.2.6 - SQL Injection vulnerability
CVE-2025-67950
WordPress All In One SEO Pack plugin <= 4.9.1 - SQL Injection vulnerability
CVE-2025-67467
WordPress GiveWP plugin <= 4.13.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-60238
WordPress UNIVERSAM plugin <= 9.04.02 - PHP Object Injection vulnerability