← All credits
Muhammad Yudha - DJ | Patchstack Bug Bounty Program
359 vulnerability records and advisories credit this contributor.
CVE-2025-66094
WordPress Yada Wiki plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62943
WordPress Next Page, Not Next Post plugin <= 0.3.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62942
WordPress WP Mapbox GL JS Maps plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62941
WordPress Events Maker by dFactory plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62940
WordPress Blox Lite plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62939
WordPress Open Currency Converter plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62937
WordPress Post List Featured Image plugin <= 0.5.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62917
WordPress Tooltipy plugin <= 5.5.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62912
WordPress SiteGround Email Marketing plugin <= 1.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62907
WordPress Custom Post Type Attachment plugin <= 3.4.6 - Cross Site Scripting (XSS) vulnerability