← All credits
Phat RiO | Patchstack Bug Bounty Program
324 vulnerability records and advisories credit this contributor.
CVE-2026-27385
WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-27374
WordPress WooCommerce Order Details plugin <= 3.1 - Broken Access Control vulnerability
CVE-2026-27362
WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Broken Access Control vulnerability
CVE-2026-27363
WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27354
WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27361
WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability
CVE-2026-27052
WordPress Sales Countdown Timer for WooCommerce and WordPress plugin < 1.1.9 - Local File Inclusion vulnerability
CVE-2026-27045
WordPress WooCommerce Infinite Scroll plugin <= 1.6.2 - PHP Object Injection vulnerability
CVE-2026-27040
WordPress WZone plugin <= 14.0.31 - Arbitrary File Deletion vulnerability
CVE-2026-27039
WordPress WZone plugin <= 14.0.31 - SQL Injection vulnerability