← All credits
hhhai | Patchstack Bug Bounty Program
55 vulnerability records and advisories credit this contributor.
CVE-2026-39644
WordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerability
CVE-2026-39640
WordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerability
CVE-2026-39615
WordPress Download Manager plugin <= 3.3.53 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39528
WordPress WP Delicious plugin <= 1.9.5 - Broken Access Control vulnerability
CVE-2026-39520
WordPress weDocs plugin <= 2.1.18 - Broken Access Control vulnerability
CVE-2026-32521
WordPress WP Custom Admin Interface plugin <= 7.42 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32413
WordPress Permalink Manager Lite plugin < 2.5.3 - Broken Access Control vulnerability
CVE-2026-32406
WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability
CVE-2025-67978
WordPress Educare plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67626
WordPress WP SEO Search plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability