← All credits
timomangcut | Patchstack Bug Bounty Program
73 vulnerability records and advisories credit this contributor.
CVE-2026-81770
WordPress Interactive Geo Maps plugin <= 1.6.30 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-81771
WordPress TrustedSite plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-68567
WordPress Convert Pro plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73393
WordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28172
WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability
CVE-2026-59530
WordPress Stripe For WooCommerce plugin <= 4.0.7 - Broken Access Control vulnerability
CVE-2026-57693
WordPress Ad Inserter plugin <= 2.8.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57669
WordPress Advanced Contact form 7 DB plugin <= 2.0.9 - Broken Access Control vulnerability
CVE-2026-57754
WordPress Livemesh Addons for WPBakery Page Builder plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57737
WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.16 - Cross Site Scripting (XSS) vulnerability