← All credits
Bao - BlueRock | Patchstack Bug Bounty Program
81 vulnerability records and advisories credit this contributor.
CVE-2025-67929
WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerability
CVE-2025-64635
WordPress Feeds for YouTube plugin <= 2.4.0 - Broken Access Control vulnerability
CVE-2025-64357
WordPress Advanced Database Cleaner plugin <= 3.1.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-64273
WordPress Email marketing for WordPress by GetResponse Official plugin <= 1.5.3 - Broken Access Control vulnerability
CVE-2025-62902
WordPress WP Popup Builder plugin <= 1.3.8 - Sensitive Data Exposure vulnerability
CVE-2025-62890
WordPress Premmerce Brands for WooCommerce plugin <= 1.2.13 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-60122
WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability
CVE-2025-60123
WordPress HivePress Claim Listings plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2025-60120
WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability
CVE-2025-60119
WordPress CoSchedule Plugin <= 3.3.11 - Sensitive Data Exposure Vulnerability