← All credits
ch4r0n | Patchstack Bug Bounty Program
79 vulnerability records and advisories credit this contributor.
CVE-2025-49403
WordPress Premium Age Verification / Restriction for WordPress Plugin <= 3.0.2 - Arbitrary File Download Vulnerability
CVE-2026-39480
WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerability
CVE-2025-58201
WordPress AfterShip Tracking Plugin <= 1.17.17 - Broken Access Control Vulnerability
CVE-2025-23967
WordPress GG Bought Together for WooCommerce plugin <= 1.0.2 - SQL Injection Vulnerability
CVE-2025-49973
WordPress Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes plugin <= 1.0.10 - Broken Access Control Vulnerability
CVE-2025-48122
WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - SQL Injection Vulnerability
CVE-2025-28995
WordPress Viral Loops WP Integration plugin <= 3.8.1 - Broken Access Control Vulnerability
CVE-2025-47633
WordPress Awin – Advertiser Tracking for WooCommerce plugin <= 2.0.0 - CSRF to Product Feed Regeneration vulnerability
CVE-2025-46245
WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-48147
WordPress CryptoCloud - Crypto Payment Gateway plugin <= 2.1.2 - Broken Access Control vulnerability