← All credits
savphill | Patchstack Bug Bounty Program
38 vulnerability records and advisories credit this contributor.
CVE-2025-24644
WordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-22825
WordPress Flexible PDF Coupons plugin < 1.10.3 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-22802
WordPress Email Templates Customizer YeeMail plugin <= 2.1.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22696
WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control vulnerability
CVE-2025-22315
WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-54323
WordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerability
CVE-2024-49288
WordPress Email Template Customizer for WooCommerce plugin <= 1.2.9.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49256
WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability
CVE-2024-47622
WordPress Advanced Woo Labels plugin <= 2.01 - Cross Site Scripting (XSS) vulnerability
CVE-2024-47385
WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability