← All credits
AndrewN | Patchstack Bug Bounty Program
32 vulnerability records and advisories credit this contributor.
CVE-2026-111411
WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability
CVE-2026-119366
WordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62048
WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerability
CVE-2026-39786
WordPress BA Book Everything plugin <= 1.8.33 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65566
WordPress AI Engine plugin <= 3.8.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-61988
WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115609
WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115593
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115965
WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability
CVE-2026-115612
WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability