GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Manab Jyoti Dowarah | Patchstack Bug Bounty Program

8 vulnerability records and advisories credit this contributor.

CVE-2025-32280
WordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-31628
WordPress Sliced Invoices plugin <= 3.10.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-22649
WordPress WP Project Manager plugin <= 2.6.22 - Cross Site Scripting (XSS) vulnerability
CVE-2024-53826
WordPress WPCasa plugin <= 1.2.13 - Insecure Direct Object References (IDOR) vulnerability
CVE-2024-53819
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2024-47301
WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43136
WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability
CVE-2024-35729
WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability