← All credits
mcdruid | Patchstack Bug Bounty Program
40 vulnerability records and advisories credit this contributor.
CVE-2025-64227
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability
CVE-2026-27366
WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability
CVE-2026-27410
WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability
CVE-2026-40720
WordPress Royal Elementor Addons Pro plugin < 1.7.1041 - Cross Site Scripting (XSS) vulnerability
CVE-2026-48838
WordPress Post SMTP plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-58662
WordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerability
CVE-2025-58815
WordPress Aitasi Coming Soon Plugin <= 2.0.2 - Deserialization of untrusted data Vulnerability
CVE-2025-58644
WordPress LTL Freight Quotes - TQL Edition Plugin <= 1.2.6 - PHP Object Injection Vulnerability
CVE-2025-49335
WordPress External Media plugin <= 1.0.36 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-58839
WordPress eDS Responsive Menu Plugin <= 1.2 - PHP Object Injection Vulnerability