← All credits

dzaku | Patchstack Bug Bounty Program

8 vulnerability records and advisories credit this contributor.

CVE-2026-110903

WordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerability

CVE-2026-110888

WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

CVE-2026-110375

WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

CVE-2026-109893

WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability

CVE-2026-109688

WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

CVE-2026-109697

WordPress SureCart plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability

CVE-2026-108495

WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability

CVE-2026-108490

WordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerability