← All credits
Jakub Herman | Patchstack Bug Bounty Program
65 vulnerability records and advisories credit this contributor.
CVE-2026-49773
WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42654
WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authentication vulnerability
CVE-2026-42677
WordPress WP Document Revisions plugin <= 3.8.1 - Broken Access Control vulnerability
CVE-2026-45217
WordPress Stripe Payment Gateway for WooCommerce plugin <= 5.0.7 - Broken Authentication vulnerability
CVE-2026-40778
WordPress Majestic Support plugin <= 1.1.2 - Broken Access Control vulnerability
CVE-2026-40784
WordPress FluentBoards plugin <= 1.91.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-39616
WordPress Download Attachments plugin <= 1.4.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-39602
WordPress Order Tracking plugin <= 3.4.3 - Broken Access Control vulnerability
CVE-2026-32423
WordPress Admin and Site Enhancements (ASE) plugin <= 8.4.0 - Broken Access Control vulnerability
CVE-2026-32408
WordPress Brizy plugin <= 2.7.23 - Broken Access Control vulnerability