← All credits
dutafi | Patchstack Bug Bounty Program
67 vulnerability records and advisories credit this contributor.
CVE-2026-32478
WordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injection vulnerability
CVE-2026-32476
WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28166
WordPress Tourmaster plugin <= 5.4.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-68566
WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability
CVE-2026-66613
WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability
CVE-2026-66611
WordPress Paymob for WooCommerce plugin <= 4.1.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66609
WordPress TheGem (Elementor) theme <= 5.12.3 - SQL Injection vulnerability
CVE-2026-66594
WordPress WordPress Persistent Login plugin <= 3.1.0 - SQL Injection vulnerability
CVE-2026-66598
WordPress B2BKing Premium plugin <= 5.6.07 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66581
WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability