← All credits
timomangcut | Patchstack Bug Bounty Program
73 vulnerability records and advisories credit this contributor.
CVE-2026-57629
WordPress StatCounter plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42649
WordPress Favicon Rotator plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-49046
WordPress Duplicate Page and Post plugin <= 2.9.5 - SQL Injection vulnerability
CVE-2026-49059
WordPress Facebook for WooCommerce plugin <= 3.7.0 - Open Redirection vulnerability
CVE-2026-49054
WordPress The Post Grid plugin <= 7.9.2 - Broken Access Control vulnerability
CVE-2026-49047
WordPress DearFlip plugin <= 2.4.27 - Broken Access Control vulnerability
CVE-2026-49044
WordPress Advanced Custom Fields: Font Awesome Field plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-49045
WordPress Adminimize plugin <= 1.11.11 - Broken Access Control vulnerability
CVE-2026-42643
WordPress Image Widget plugin <= 4.4.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42646
WordPress TaxoPress plugin <= 3.44.0 - SQL Injection vulnerability