← All credits
Jakub Herman | Patchstack Bug Bounty Program
65 vulnerability records and advisories credit this contributor.
CVE-2026-73398
WordPress Piraeus Bank WooCommerce Payment Gateway plugin 3.2.0 - Broken Authentication vulnerability
CVE-2026-73399
WordPress Flutterwave WooCommerce plugin <= 3.3.0 - Broken Authentication vulnerability
CVE-2026-73395
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-73400
WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Local File Inclusion vulnerability
CVE-2026-66425
WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerability
CVE-2026-61945
WordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability
CVE-2026-57378
WordPress Advanced Forms plugin <= 1.9.3.7 - Broken Access Control vulnerability
CVE-2026-57697
WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability
CVE-2026-57360
WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57721
WordPress ApplyOnline plugin <= 2.6.7.6 - Broken Access Control vulnerability