← All credits
Abdi Pranata | Patchstack Bug Bounty Program
223 vulnerability records and advisories credit this contributor.
CVE-2025-25124
WordPress Status Updater Plugin <= 9.21 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-25126
WordPress ZMSEO plugin <= 1.14.1 - CSRF to Stored XSS vulnerability
CVE-2025-25113
WordPress Implied Cookie Consent plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-25104
WordPress URL-Preview-Box plugin <= 1.20 - CSRF to Stored XSS vulnerability
CVE-2025-25107
WordPress OneStore Sites plugin <= 0.1.1 - CSRF to Arbitrary Plugin Installation vulnerability
CVE-2025-25106
WordPress Starter Templates by FancyWP plugin <= 2.0.0 - CSRF to Arbitrary Plugin Installation vulnerability
CVE-2025-25101
WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability
CVE-2025-25090
WordPress Dreamstime Stock Photos plugin <= 4.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24737
WordPress WP Helper Premium plugin <= 4.6.1 - Broken Access Control vulnerability
CVE-2025-24708
WordPress WP Dynamics CRM plugin <= 1.1.6 - Reflected Cross Site Scripting (XSS) vulnerability