← All credits
savphill | Patchstack Bug Bounty Program
37 vulnerability records and advisories credit this contributor.
CVE-2024-35768
WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24542
WordPress Icegram Engage plugin <= 3.1.31 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49686
WordPress Landing Page Cat plugin <= 1.7.4 - Broken Access Control vulnerability
CVE-2024-35653
WordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-27997
WordPress Visual Composer plugin <= 45.6.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24651
WordPress WebToffee WP Backup and Migration plugin <= 1.5.3 - Sensitive Data Exposure vulnerability
CVE-2025-22773
WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability
CVE-2025-64200
WordPress Email Template Customizer for WooCommerce plugin <= 1.2.17 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24620
WordPress Landing Page Builder plugin <= 1.5.3.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-60101
WordPress Woostify Theme <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability