← All credits
Asim Alshaya | Patchstack Bug Bounty Program
46 vulnerability records and advisories credit this contributor.
CVE-2026-112313
WordPress ACF Extended plugin <= 0.9.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73186
WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability
CVE-2026-97246
WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
CVE-2026-96449
WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability
CVE-2026-108479
WordPress Patreon WordPress plugin <= 1.9.17 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-62028
WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Broken Access Control vulnerability
CVE-2026-62043
WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability
CVE-2026-62027
WordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62030
WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-66479
WordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerability