GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Muhammad Sharief | Patchstack Bug Bounty Program

6 vulnerability records and advisories credit this contributor.

CVE-2026-66448
WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39561
WordPress Revive.so plugin <= 2.0.7 - Broken Access Control vulnerability
CVE-2026-39536
WordPress RSVP and Event Management plugin <= 2.7.16 - Sensitive Data Exposure vulnerability
CVE-2026-39526
WordPress WpStream plugin < 4.11.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-39595
WordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerability
CVE-2026-39527
WordPress WpStream plugin < 4.11.2 - Arbitrary File Upload vulnerability