Pham Van Tam | Patchstack Bug Bounty Program

WordPress Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

WordPress Welcome Popup plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability

WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Broken Access Control vulnerability

WordPress Ethiopian Calendar plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

WordPress Multi Days Events and Multi Events in One Day Calendar plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability

WordPress Songkick Concerts and Festivals plugin <= 0.9.7 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Event Kikfyre plugin <= 2.1.8 - Broken Access Control vulnerability

WordPress Easy WP Tiles plugin <= 1 - Cross Site Scripting (XSS) vulnerability