← All credits
Abu Hurayra | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2025-66066
WordPress Envo Extra plugin <= 1.9.11 - Cross Site Scripting (XSS) vulnerability
CVE-2025-66058
WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability
CVE-2025-64350
WordPress Rank Math SEO plugin <= 1.0.252.1 - Broken Access Control vulnerability
CVE-2025-62927
WordPress Nelio Content plugin <= 4.0.5 - Broken Access Control vulnerability
CVE-2025-62928
WordPress SEO Meta Description Updater plugin <= 1.2.0 - Broken Access Control vulnerability
CVE-2025-62929
WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability
CVE-2025-62887
WordPress King Addons for Elementor plugin <= 51.1.61 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62889
WordPress King Addons for Elementor plugin <= 51.1.61 - Broken Access Control vulnerability
CVE-2025-60156
WordPress AR For WordPress plugin <= 8.34 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-60112
WordPress aThemes Addons for Elementor Plugin <= 1.1.2 - Cross Site Scripting (XSS) Vulnerability