← All credits
she11f | Patchstack Bug Bounty Program
16 vulnerability records and advisories credit this contributor.
CVE-2026-84847
WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerability
CVE-2026-81280
WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability
CVE-2026-65570
WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerability
CVE-2026-57389
WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability
CVE-2026-57698
WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.12 - Broken Authentication vulnerability
CVE-2026-57418
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.13 - Broken Access Control vulnerability
CVE-2026-57372
WordPress WPJAM Basic plugin <= 7.0 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-57328
WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability
CVE-2026-54821
WordPress Visual Link Preview plugin <= 2.3.1 - Sensitive Data Exposure vulnerability
CVE-2026-48885
WordPress HollerBox plugin <= 2.3.10.1 - Cross Site Scripting (XSS) vulnerability