← All credits
theviper17 | Patchstack Bug Bounty Program
179 vulnerability records and advisories credit this contributor.
CVE-2025-31838
WordPress Eventbee RSVP Widget plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24692
WordPress Bulk Menu Edit plugin <= 1.3 - Broken Access Control vulnerability
CVE-2025-23965
WordPress Kopa Nictitate Toolkit plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-50548
WordPress Awesome Progress Bar plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability
CVE-2024-51678
WordPress Elo Rating Shortcode plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49695
WordPress WP Flow Plus plugin <= 5.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49671
WordPress AI Postpix plugin <= 1.1.8 - Arbitrary File Upload vulnerability
CVE-2024-49317
WordPress Point Maker plugin <= 0.1.4 - Local File Inclusion vulnerability
CVE-2025-49917
WordPress Icegram Express Pro plugin <= 5.9.5 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-22491
WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability