← All credits
Jakub Herman | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-40787
WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-40790
WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability
CVE-2026-40793
WordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability
CVE-2026-40794
WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability
CVE-2026-42651
WordPress Classified Listing plugin <= 5.3.9 - Broken Access Control vulnerability
CVE-2026-49056
WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.9.4 - Sensitive Data Exposure vulnerability
CVE-2026-40792
WordPress KiviCare plugin <= 4.2.1 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-40785
WordPress AutomatorWP plugin <= 5.6.7 - Broken Authentication vulnerability
CVE-2026-48883
WordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerability
CVE-2026-39450
WordPress FunnelKit Automations plugin <= 3.7.3 - Broken Authentication vulnerability