← All credits
mcdruid | Patchstack Bug Bounty Program
40 vulnerability records and advisories credit this contributor.
CVE-2025-58642
WordPress LTL Freight Quotes – Day & Ross Edition Plugin <= 2.1.11 - PHP Object Injection Vulnerability
CVE-2025-68864
WordPress Infility Global plugin <= 2.15.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32358
WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability
CVE-2026-28135
WordPress Royal Elementor Addons plugin <= 1.7.1052 - Other vulnerability Type vulnerability
CVE-2025-69323
WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-69319
WordPress Beaver Builder plugin <= 2.9.4.1 - Arbitrary Code Execution vulnerability
CVE-2025-49372
WordPress HAPPY plugin <= 1.0.7 - Remote Code Execution (RCE) vulnerability
CVE-2025-68898
WordPress Synergy Project Manager plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-52740
WordPress Boldermail Plugin <= 2.4.0 - PHP Object Injection Vulnerability
CVE-2025-62023
WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability