← All credits
VanTastic | Patchstack Bug Bounty Program
31 vulnerability records and advisories credit this contributor.
CVE-2026-65495
WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability
CVE-2026-59544
WordPress Thrive Quiz Builder plugin <= 10.9.3.0 - PHP Object Injection vulnerability
CVE-2026-57390
WordPress Extra Product Options Builder for WooCommerce plugin <= 1.2.167 - Broken Access Control vulnerability
CVE-2026-57725
WordPress Kirki plugin <= 6.0.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57724
WordPress Kirki plugin <= 6.0.12 - PHP Object Injection vulnerability
CVE-2026-57771
WordPress GD Rating System plugin <= 3.7 - SQL Injection vulnerability
CVE-2026-59515
WordPress AIWU plugin <= 1.5.4 - SQL Injection vulnerability
CVE-2026-57680
WordPress Kirki plugin <= 6.0.11 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-56069
WordPress Toolset Forms plugin <= 2.6.24 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-56031
WordPress Uncanny Automator plugin <= 7.3.1.2 - PHP Object Injection vulnerability