← All credits
luc | Patchstack Bug Bounty Program
24 vulnerability records and advisories credit this contributor.
CVE-2026-32556
WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32555
WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerability
CVE-2026-66634
WordPress Modal Survey plugin <= 2.0.2.2.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-73340
WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28158
WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28157
WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability
CVE-2026-28156
WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability
CVE-2026-28155
WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-65441
WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61953
WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability