← All credits
Steven Julian | Patchstack Bug Bounty Program
26 vulnerability records and advisories credit this contributor.
CVE-2026-32465
WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability
CVE-2026-32464
WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability
CVE-2026-66654
WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39521
WordPress Nelio Content plugin <= 4.3.1 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39669
WordPress NitroPack plugin <= 1.19.3 - Broken Access Control vulnerability
CVE-2026-39668
WordPress Book Previewer for Woocommerce plugin <= 1.0.6 - Broken Access Control vulnerability
CVE-2026-39665
WordPress SEO Friendly Images plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65489
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability
CVE-2026-65488
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2026-39676
WordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerability