← All credits
Peng Zhou | Patchstack Bug Bounty Program
23 vulnerability records and advisories credit this contributor.
CVE-2026-81792
WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.5 - Privilege Escalation vulnerability
CVE-2026-81784
WordPress Wise Chat plugin <= 3.4 - PHP Object Injection vulnerability
CVE-2026-81785
WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
CVE-2026-81790
WordPress Csomagpontok és szállítási címkék WooCommerce-hez plugin < 4.2.8 - Broken Access Control vulnerability
CVE-2026-66622
WordPress Depicter Slider plugin <= 4.8.0 - SQL Injection vulnerability
CVE-2026-42673
WordPress Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin <= 3.3.6 - Sensitive Data Exposure vulnerability
CVE-2026-57406
WordPress FundEngine plugin <= 1.7.6 - Broken Access Control vulnerability
CVE-2026-57399
WordPress Proxy & VPN Blocker plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-54848
WordPress APIExperts Square for WooCommerce plugin <= 4.7.3 - Sensitive Data Exposure vulnerability
CVE-2026-54803
WordPress SMS Alert Order Notifications plugin <= 3.9.4 - Privilege Escalation vulnerability