← All credits
Jakub Herman | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-54184
WordPress Clean Login plugin <= 1.15 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-40773
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.9 - Broken Access Control vulnerability
CVE-2026-34892
WordPress Rank Math SEO plugin <= 1.0.271 - Broken Access Control vulnerability
CVE-2026-40766
WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability
CVE-2026-42660
WordPress Contest Gallery plugin <= 28.1.7 - Sensitive Data Exposure vulnerability
CVE-2026-42384
WordPress Simply Schedule Appointments plugin < 1.6.11.2 - Sensitive Data Exposure vulnerability
CVE-2026-49110
WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability
CVE-2026-39503
WordPress Easy Digital Downloads plugin <= 3.6.5 - Broken Access Control vulnerability
CVE-2026-39515
WordPress Motors plugin < 1.4.107 - Broken Access Control vulnerability
CVE-2026-40781
WordPress ReviewX plugin <= 2.3.6 - Broken Authentication vulnerability