← All credits
Muhammad Yudha - DJ | Patchstack Bug Bounty Program
359 vulnerability records and advisories credit this contributor.
CVE-2025-30610
WordPress WP Social Widget plugin <= 2.2.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-30566
WordPress Clink plugin <= 1.2.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-28957
WordPress OwnerRez API plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-27320
WordPress Profile Widget Ninja plugin <= 4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-27280
WordPress Archive Page plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-27272
WordPress VG PostCarousel plugin <= 1.1 - Local File Inclusion vulnerability
CVE-2025-27266
WordPress Hover Image Button plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-27265
WordPress Google Maps for WordPress plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26950
WordPress Nepali Date Converter plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26906
WordPress WP Delete User Accounts plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability