← All credits
hhhai | Patchstack Bug Bounty Program
55 vulnerability records and advisories credit this contributor.
CVE-2026-42750
WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42755
WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability
CVE-2026-42757
WordPress WebinarIgnition plugin < 4.08.253 - Arbitrary File Deletion vulnerability
CVE-2026-42758
WordPress WebinarIgnition plugin < 4.08.253 - Privilege Escalation vulnerability
CVE-2026-42761
WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability
CVE-2026-32521
WordPress WP Custom Admin Interface plugin <= 7.42 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32413
WordPress Permalink Manager Lite plugin < 2.5.3 - Broken Access Control vulnerability
CVE-2026-32406
WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability
CVE-2025-67978
WordPress Educare plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67626
WordPress WP SEO Search plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability