← All credits
hhhai | Patchstack Bug Bounty Program
55 vulnerability records and advisories credit this contributor.
CVE-2026-57409
WordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57404
WordPress Booking and Rental Manager plugin <= 2.6.9 - Broken Access Control vulnerability
CVE-2026-57402
WordPress Flexible Refund and Return Order for WooCommerce plugin <= 1.0.51 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57401
WordPress SureDash plugin <= 1.8.0 - Arbitrary File Deletion vulnerability
CVE-2026-57371
WordPress WPJAM Basic plugin <= 7.0 - PHP Object Injection vulnerability
CVE-2026-57621
WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability
CVE-2026-57643
WordPress WP Post Author plugin <= 3.9.1 - SQL Injection vulnerability
CVE-2026-57653
WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability
CVE-2026-54838
WordPress WC Vendors Marketplace plugin <= 2.6.8 - SQL Injection vulnerability
CVE-2026-54849
WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerability