← All credits
hhhai | Patchstack Bug Bounty Program
55 vulnerability records and advisories credit this contributor.
CVE-2026-73992
WordPress Query Wrangler plugin <= 1.5.57 - Remote Code Execution (RCE) vulnerability
CVE-2026-28567
WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability
CVE-2026-27537
WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66452
WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access Control vulnerability
CVE-2026-28139
WordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerability
CVE-2026-59553
WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39644
WordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerability
CVE-2026-39640
WordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerability
CVE-2026-39615
WordPress Download Manager plugin <= 3.3.53 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39528
WordPress WP Delicious plugin <= 1.9.5 - Broken Access Control vulnerability