← All credits
ch4r0n | Patchstack Bug Bounty Program
79 vulnerability records and advisories credit this contributor.
CVE-2025-60244
WordPress TableOn plugin <= 1.0.5.1 - Content Injection vulnerability
CVE-2025-60243
WordPress Selling Commander for WooCommerce plugin <= 1.2.46 - Privilege Escalation vulnerability
CVE-2025-60247
WordPress Bux Woocommerce plugin <= 1.2.3 - Broken Access Control vulnerability
CVE-2025-57939
WordPress Image Hover Effects – Elementor Addon Plugin <= 1.4.4 - Broken Access Control Vulnerability
CVE-2025-57931
WordPress Popup box plugin <= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-53295
WordPress iCount Payment Gateway plugin <= 2.0.7 - Broken Access Control Vulnerability
CVE-2025-53291
WordPress Spreadconnect plugin <= 2.1.5 - Broken Access Control Vulnerability
CVE-2025-53255
WordPress HurryTimer plugin <= 2.13.1 - Broken Access Control Vulnerability
CVE-2025-53208
WordPress Maya Business <= 1.2.0 - Insecure Direct Object References (IDOR) Vulnerability
CVE-2025-52830
WordPress bSecure – Your Universal Checkout plugin <= 1.7.9 - SQL Injection Vulnerability