← All credits
Skalucy | Patchstack Bug Bounty Program
155 vulnerability records and advisories credit this contributor.
CVE-2025-67930
WordPress eHive Search plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67911
WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability
CVE-2025-68872
WordPress Eli's WordCents adSense Widget with Analytics plugin <= 1.3.03.27 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68851
WordPress Okay Toolkit plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68840
WordPress iRobots.txt SEO plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-27371
WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49342
WordPress Custom Style plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-49346
WordPress Simple Archive Generator plugin <= 5.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-52780
WordPress Logo Manager For Samandehi plugin <= 0.5 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-32664
WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability