← All credits

Filip Kowalski | Patchstack Bug Bounty Program

15 vulnerability records and advisories credit this contributor.

CVE-2026-123482

WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

CVE-2026-120855

WordPress TI WooCommerce Wishlist plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability

CVE-2026-123469

WordPress The Events Calendar plugin <= 6.18.3 - Content Injection vulnerability

CVE-2026-123483

WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability

CVE-2026-120852

WordPress CartFlows plugin <= 3.3.0 - Content Injection vulnerability

WordPress ProfilePress plugin <= 4.17.7 - Content Injection vulnerability

CVE-2026-123860

WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability

CVE-2026-120853

WordPress CartFlows plugin <= 3.3.0 - Broken Access Control vulnerability

CVE-2026-115952

WordPress Forminator plugin <= 1.58.3 - Cross Site Scripting (XSS) vulnerability

CVE-2026-116858

WordPress Forminator plugin <= 1.58.3 - Content Injection vulnerability