← All credits
PPzzAArr | Patchstack Bug Bounty Program
20 vulnerability records and advisories credit this contributor.
CVE-2026-25465
WordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24988
WordPress The Events Calendar Shortcode & Block plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24599
WordPress NextMove Lite plugin <= 2.23.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-24385
WordPress Podlove Web Player plugin <= 5.9.1 - PHP Object Injection vulnerability
CVE-2026-24375
WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerability
CVE-2026-24366
WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability
CVE-2026-23972
WordPress Booking and Rental Manager plugin <= 2.6.0 - Broken Access Control vulnerability
CVE-2025-69327
WordPress Car Rental Manager plugin <= 1.0.9 - Broken Access Control vulnerability
CVE-2025-67621
WordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability
CVE-2025-47444
WordPress FiboSearch plugin <= 1.32.1 - Broken Access Control vulnerability