← All credits
PPzzAArr | Patchstack Bug Bounty Program
20 vulnerability records and advisories credit this contributor.
CVE-2026-27365
WordPress PublishPress Series plugin <= 2.17.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27329
WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-31919
WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1 - Broken Access Control vulnerability
CVE-2026-24372
WordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerability
CVE-2025-69343
WordPress Theater for WordPress plugin <= 0.19 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64253
WordPress Health Check & Troubleshooting plugin <= 1.7.1 - Path Traversal vulnerability
CVE-2026-22461
WordPress CTX Feed plugin <= 6.6.18 - Broken Access Control vulnerability
CVE-2026-27344
WordPress inseri core plugin <= 1.0.5 - Broken Access Control vulnerability
CVE-2026-27046
WordPress StoreCustomizer plugin <= 2.6.3 - Broken Access Control vulnerability
CVE-2026-27042
WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability