GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Jorge Diaz (ddiax) | Patchstack Bug Bounty Program

8 vulnerability records and advisories credit this contributor.

CVE-2024-45460
WordPress Flipping Cards plugin <= 1.30 - Cross Site Scripting (XSS) vulnerability
CVE-2024-27188
WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22651
WordPress Stylish Google Sheet Reader plugin <= 4.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22320
WordPress ProductDyno plugin <= 1.0.24 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-52435
WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability
CVE-2024-47336
WordPress Terms Descriptions plugin <= 3.4.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-47338
WordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerability
CVE-2024-44037
WordPress Multipurpose Ticket Booking Manager plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerability