← All credits
hhhai | Patchstack Bug Bounty Program
55 vulnerability records and advisories credit this contributor.
CVE-2026-54818
WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
CVE-2026-42378
WordPress WP Full Stripe Free plugin <= 8.4.1 - Broken Authentication vulnerability
CVE-2026-42663
WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39451
WordPress WP Google Review Slider plugin <= 18.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-54197
WordPress GetGenie plugin <= 4.4.1 - Sensitive Data Exposure vulnerability
CVE-2026-42686
WordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42687
WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability
CVE-2026-0677
WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerability
CVE-2026-42733
WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42740
WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability