← All credits
Legion Hunter | Patchstack Bug Bounty Program
221 vulnerability records and advisories credit this contributor.
CVE-2025-67913
WordPress Aruba HiSpeed Cache plugin < 3.0.3 - Broken Access Control vulnerability
CVE-2025-67596
WordPress Business Directory plugin <= 6.4.19 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67580
WordPress Constant Contact + WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability
CVE-2025-67574
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerability
CVE-2025-67575
WordPress Sitewide Notice WP plugin <= 2.4.1 - Broken Access Control vulnerability
CVE-2025-67561
WordPress Debug Log Viewer plugin <= 2.0.3 - Broken Access Control vulnerability
CVE-2025-67563
WordPress Post SMTP plugin <= 3.6.1 - Broken Access Control vulnerability
CVE-2025-66525
WordPress Elastic Email Sender plugin <= 1.2.20 - Broken Access Control vulnerability
CVE-2025-66133
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.7 - Broken Access Control vulnerability
CVE-2025-66124
WordPress Leaky Paywall plugin <= 4.22.6 - Broken Access Control vulnerability