← All credits

Ayukiab | Patchstack Bug Bounty Program

20 vulnerability records and advisories credit this contributor.

CVE-2026-123477

WordPress JetEngine plugin <= 3.9.0.2 - Cross Site Scripting (XSS) vulnerability

CVE-2026-122669

WordPress Everest Forms plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability

WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability

WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability

CVE-2026-116850

WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability

CVE-2026-111850

WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability

WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability

CVE-2026-115608

WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability

CVE-2026-112835

WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

CVE-2026-112836

WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability