← All credits
Phat RiO | Patchstack Bug Bounty Program
324 vulnerability records and advisories credit this contributor.
CVE-2026-65487
WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability
CVE-2026-65478
WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
CVE-2026-57786
WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability
CVE-2026-57787
WordPress CWS SVGicons plugin <= 1.5.5 - SQL Injection vulnerability
CVE-2026-57747
WordPress Booked plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57746
WordPress Booked plugin <= 3.0.0 - Broken Access Control vulnerability
CVE-2026-57750
WordPress ez Form Calculator Premium plugin <= 2.14.1.2 - Broken Access Control vulnerability
CVE-2025-66123
WordPress BookPro plugin <= 1.1.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-24611
WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability
CVE-2026-24610
WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability