← All credits
hhhai | Patchstack Bug Bounty Program
55 vulnerability records and advisories credit this contributor.
CVE-2026-39520
WordPress weDocs plugin <= 2.1.18 - Broken Access Control vulnerability
CVE-2026-39694
WordPress Simply Schedule Appointments plugin <= 1.6.10.2 - Broken Access Control vulnerability
CVE-2026-45438
WordPress Smart Coupons for WooCommerce plugin < 2.3.0 - Broken Access Control vulnerability
CVE-2026-61947
WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59555
WordPress Participants Database plugin <= 2.7.8.3 - Arbitrary File Deletion vulnerability
CVE-2026-57696
WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability
CVE-2026-65510
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42685
WordPress WP Job Portal plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42684
WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability
CVE-2026-42681
WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerability