← All credits
Asim Alshaya | Patchstack Bug Bounty Program
35 vulnerability records and advisories credit this contributor.
CVE-2026-73381
WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability
CVE-2026-73378
WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73366
WordPress Easy Google Maps plugin <= 1.13.0 - PHP Object Injection vulnerability
CVE-2026-73997
WordPress Starter Templates by Kadence WP plugin <= 2.3.3 - Denial of Service Attack vulnerability
CVE-2026-28181
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability
CVE-2026-28186
WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken Access Control vulnerability
CVE-2026-73357
WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66700
WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66698
WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66436
WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability