← All credits
Muhammad Yudha - DJ | Patchstack Bug Bounty Program
359 vulnerability records and advisories credit this contributor.
CVE-2025-66090
WordPress SKT Skill Bar plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-52737
WordPress WP Store Locator plugin <= 2.2.260 - PHP Object Injection vulnerability
CVE-2025-62987
WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62985
WordPress Simple Pull Quote plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62983
WordPress Posts By Tag plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62971
WordPress Attesa Extra plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62969
WordPress NextMove Lite plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62968
WordPress WP Last Modified Info plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62967
WordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62951
WordPress H5P plugin <= 1.16.0 - Cross Site Scripting (XSS) vulnerability