← All credits
Jakub Herman | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-34886
WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability
CVE-2026-49773
WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability
CVE-2026-40778
WordPress Majestic Support plugin <= 1.1.2 - Broken Access Control vulnerability
CVE-2026-40784
WordPress FluentBoards plugin <= 1.91.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-32423
WordPress Admin and Site Enhancements (ASE) plugin <= 8.4.0 - Broken Access Control vulnerability
CVE-2026-32408
WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability
CVE-2026-32397
WordPress Filter & Grids plugin <= 3.5.1 - Broken Access Control vulnerability
CVE-2026-32386
WordPress Envo Extra plugin <= 1.9.13 - Broken Access Control vulnerability
CVE-2026-3075
WordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability
CVE-2026-25428
WordPress TS Poll plugin <= 2.5.5 - Server Side Request Forgery (SSRF) vulnerability