← All credits
Jakub Herman | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-57736
WordPress HubSpot plugin <= 11.3.51 - Sensitive Data Exposure vulnerability
CVE-2026-56048
WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-56061
WordPress Subscriptions for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability
CVE-2026-57654
WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability
CVE-2026-56027
WordPress Booster for WooCommerce plugin <= 8.0.1 - Arbitrary File Upload vulnerability
CVE-2026-56060
WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 7.1.1 - Sensitive Data Exposure vulnerability
CVE-2026-54802
WordPress SMS Alert Order Notifications plugin <= 3.9.3 - Broken Authentication vulnerability
CVE-2026-52698
WordPress PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
CVE-2026-54817
WordPress MStore API plugin <= 4.18.4 - Broken Authentication vulnerability
CVE-2026-49767
WordPress wpForo Forum plugin <= 3.1.0 - Broken Authentication vulnerability