← All credits
timomangcut | Patchstack Bug Bounty Program
73 vulnerability records and advisories credit this contributor.
CVE-2025-47532
WordPress CoinPayments.net Payment Gateway for WooCommerce plugin <= 1.0.17 - PHP Object Injection Vulnerability
CVE-2026-40734
WordPress Categories Images plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39500
WordPress themesflat-addons-for-elementor plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39508
WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39479
WordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerability
CVE-2026-39497
WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability
CVE-2026-39482
WordPress Post Expirator plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39483
WordPress VK All in One Expansion Unit plugin <= 9.113.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39473
WordPress Simple History plugin <= 5.24.0 - Sensitive Data Exposure vulnerability
CVE-2026-39464
WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 6.19.8 - Server Side Request Forgery (SSRF) vulnerability