← All credits
Caesar Evan Santoso | Patchstack Bug Bounty Program
12 vulnerability records and advisories credit this contributor.
CVE-2025-31575
WordPress Flag Icons plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26778
WordPress Gallery Custom Links Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26779
WordPress Keep Backup Daily plugin <= 2.1.0 - Arbitrary File Download vulnerability
CVE-2025-24689
WordPress Import and export users and customers plugin 1.27.12 - Sensitive Data Exposure vulnerability
CVE-2025-24679
WordPress Internal Links Manager plugin <= 2.5.2 - Broken Access Control vulnerability
CVE-2025-24666
WordPress Hyve Lite plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-23919
WordPress Slides & Presentations Plugin <= 0.0.39 - Content Injection vulnerability
CVE-2025-22810
WordPress Content Blocks Builder plugin <= 2.7.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22542
WordPress Virtual Bot Plugin <= 1.0.0 - SQL Injection vulnerability
CVE-2025-22538
WordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability