← All credits
Bao - BlueRock | Patchstack Bug Bounty Program
82 vulnerability records and advisories credit this contributor.
CVE-2026-39570
WordPress 12 Step Meeting List plugin <= 3.19.9 - Sensitive Data Exposure vulnerability
CVE-2026-39562
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.10 - Broken Access Control vulnerability
CVE-2026-39569
WordPress 12 Step Meeting List plugin <= 3.19.9 - Broken Access Control vulnerability
CVE-2026-39543
WordPress Tourfic plugin <= 2.21.4 - Broken Access Control vulnerability
CVE-2026-39516
WordPress Nexter Blocks plugin <= 4.7.0 - Sensitive Data Exposure vulnerability
CVE-2026-32372
WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability
CVE-2026-32354
WordPress WpEvently plugin < 5.1.9 - Sensitive Data Exposure vulnerability
CVE-2025-69361
WordPress Post Expirator plugin <= 4.9.3 - Broken Access Control vulnerability
CVE-2025-63071
WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerability
CVE-2025-67564
WordPress Pixel Manager for WooCommerce plugin <= 1.51.1 - Sensitive Data Exposure vulnerability