← All credits
Muhammad Yudha - DJ | Patchstack Bug Bounty Program
359 vulnerability records and advisories credit this contributor.
CVE-2026-22354
WordPress Woocommerce Category Banner Management plugin <= 2.5.1 - PHP Object Injection vulnerability
CVE-2026-22353
WordPress teachPress plugin <= 9.0.12 - Cross Site Scripting (XSS) vulnerability
CVE-2026-22349
WordPress Menu In Post plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-22347
WordPress Carousel Horizontal Posts Content Slider plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-22346
WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.5.4 - PHP Object Injection vulnerability
CVE-2026-22345
WordPress Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery plugin <= 1.6.0 - PHP Object Injection vulnerability
CVE-2026-28040
WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27379
WordPress NextScripts plugin <= 4.4.7 - PHP Object Injection vulnerability
CVE-2026-24952
WordPress Seriously Simple Podcasting plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-23798
WordPress PowerPress Podcasting plugin <= 11.15.10 - PHP Object Injection vulnerability