← All credits
Abu Hurayra | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2025-46253
WordPress GutenKit plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-23987
WordPress Designer plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22815
WordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-54251
WordPress Prodigy Commerce plugin <= 3.1.2 - Broken Access Control vulnerability
CVE-2024-51675
WordPress aThemes Addons for Elementor plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-51676
WordPress Delisho plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-47302
WordPress Fluent Support plugin <= 1.8.0 - Broken Access Control on Email Verification vulnerability
CVE-2024-49233
WordPress MAS Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-35674
WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability
CVE-2024-34757
WordPress Borderless plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability