← All credits
Jakub Herman | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-40778
WordPress Majestic Support plugin <= 1.1.2 - Broken Access Control vulnerability
CVE-2026-40784
WordPress FluentBoards plugin <= 1.91.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-39616
WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-39602
WordPress Order Tracking plugin <= 3.4.3 - Broken Access Control vulnerability
CVE-2026-32423
WordPress Admin and Site Enhancements (ASE) plugin <= 8.4.0 - Broken Access Control vulnerability
CVE-2026-32408
WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability
CVE-2026-32397
WordPress Filter & Grids plugin <= 3.5.1 - Broken Access Control vulnerability
CVE-2026-32386
WordPress Envo Extra plugin <= 1.9.13 - Broken Access Control vulnerability
CVE-2026-3075
WordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability
CVE-2026-25428
WordPress TS Poll plugin <= 2.5.5 - Server Side Request Forgery (SSRF) vulnerability