← All credits
theviper17 | Patchstack Bug Bounty Program
179 vulnerability records and advisories credit this contributor.
CVE-2026-24528
WordPress Nova Blocks plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-22522
WordPress Block Slider plugin <= 2.2.3 - Broken Access Control vulnerability
CVE-2025-68912
WordPress HDForms plugin <= 1.6.1 - Arbitrary File Deletion vulnerability
CVE-2025-68893
WordPress WordPress Image shrinker plugin <= 1.1.0 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-68038
WordPress Icegram Express Pro plugin < 5.9.14 - PHP Object Injection vulnerability
CVE-2025-67548
WordPress WP Delicious plugin <= 1.9.1 - Broken Access Control vulnerability
CVE-2025-60086
WordPress WP Voting Contest plugin <= 5.8 - Broken Access Control vulnerability
CVE-2025-58823
WordPress Get Cash plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-58001
WordPress Compact Archives plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-58002
WordPress GD bbPress Tools Plugin <= 3.5.3 - Cross Site Scripting (XSS) Vulnerability