← All credits
hhhai | Patchstack Bug Bounty Program
55 vulnerability records and advisories credit this contributor.
CVE-2026-73992
WordPress Query Wrangler plugin <= 1.5.57 - Remote Code Execution (RCE) vulnerability
CVE-2026-28567
WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability
CVE-2026-27537
WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66452
WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access Control vulnerability
CVE-2026-28139
WordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerability
CVE-2026-59553
WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59555
WordPress Participants Database plugin <= 2.7.8.3 - Arbitrary File Deletion vulnerability
CVE-2026-57696
WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability
CVE-2026-61947
WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65510
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability