← All credits
ch4r0n | Patchstack Bug Bounty Program
79 vulnerability records and advisories credit this contributor.
CVE-2025-39438
WordPress Theme Changer plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32222
WordPress Widget Logic <= 6.0.5 - Remote Code Execution (RCE) Vulnerability
CVE-2025-31000
WordPress Payment QR WooCommerce plugin <= 1.1.6 - Broken Access Control Vulnerability
CVE-2025-30993
WordPress Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.7 - Broken Access Control Vulnerability
CVE-2025-29000
WordPress Multi-language Responsive Contact Form plugin <= 2.8 - Broken Access Control Vulnerability
CVE-2025-28994
WordPress Viral Loops WP Integration plugin <= 3.8.1 - Broken Access Control Vulnerability
CVE-2025-28967
WordPress Contact Us page - Contact people LITE plugin <= 3.7.4 - SQL Injection Vulnerability
CVE-2025-28965
WordPress URL Shortener <= 3.0.7 - Broken Access Control Vulnerability
CVE-2025-28969
WordPress Gallery Widget plugin <= 1.2.1 - SQL Injection Vulnerability
CVE-2025-28963
WordPress URL Shortener plugin <= 3.0.7 - Server Side Request Forgery (SSRF) Vulnerability