← All credits
Phat RiO | Patchstack Bug Bounty Program
324 vulnerability records and advisories credit this contributor.
CVE-2026-39438
WordPress ListingPro plugin <= 2.9.10 - SQL Injection vulnerability
CVE-2026-39443
WordPress EmallShop theme <= 2.4.21 - PHP Object Injection vulnerability
CVE-2026-39446
WordPress Kapee theme < 1.7.0 - PHP Object Injection vulnerability
CVE-2026-24637
WordPress PowerPress Podcasting plugin <= 11.15.10 - SQL Injection vulnerability
CVE-2026-27407
WordPress AI Engine plugin <= 3.4.9 - Privilege Escalation vulnerability
CVE-2026-27053
WordPress Broadcast Live Video plugin < 7.1.3 - PHP Object Injection vulnerability
CVE-2026-27333
WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Deserialization of untrusted data vulnerability
CVE-2025-58686
WordPress Perfect Brands for WooCommerce plugin <= 3.6.2 - SQL Injection vulnerability
CVE-2026-32493
WordPress JobSearch plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-27065
WordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerability