← All credits
Colin Xu | Patchstack Bug Bounty Program
10 vulnerability records and advisories credit this contributor.
CVE-2025-22290
WordPress LTL Freight Quotes – FreightQuote Edition Plugin <= 2.3.11 - SQL Injection vulnerability
CVE-2025-24665
WordPress Small Package Quotes Plugin <= 2.4.8 - SQL Injection vulnerability
CVE-2025-23921
WordPress Multi Uploader for Gravity Forms plugin <= 1.1.3 - Arbitrary File Upload vulnerability
CVE-2025-23953
WordPress user files plugin <= 2.4.2 - Arbitrary File Upload vulnerability
CVE-2025-24667
WordPress Small Package Quotes Plugin <= 5.2.17 - SQL Injection vulnerability
CVE-2025-24664
WordPress LTL Freight Quotes Plugin <= 5.0.20 - SQL Injection vulnerability
CVE-2025-23922
WordPress iSpring Embedder plugin <= 1.0 - CSRF to Arbitrary File Upload vulnerability
CVE-2025-23918
WordPress Smallerik File Browser plugin <= 1.1 - Arbitrary File Upload vulnerability
CVE-2025-22636
WordPress VR-Frases plugin <= 4.0.1 - Reflected XSS to SQL Injection vulnerability
CVE-2025-22519
WordPress eDoc Easy Tables Plugin <= 1.29 - SQL Injection vulnerability