← All credits
Jarno Vos (jrn5151) | Patchstack Bug Bounty Program
33 vulnerability records and advisories credit this contributor.
CVE-2025-68850
WordPress Sell Downloads plugin <= 1.1.12 - Broken Access Control vulnerability
CVE-2025-69411
WordPress ionCube tester plus plugin <= 1.3 - Arbitrary File Download vulnerability
CVE-2025-69324
WordPress NEX-Forms plugin <= 9.1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68881
WordPress AppExperts plugin <= 1.4.5 - SQL Injection vulnerability
CVE-2025-68867
WordPress Effect Maker plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68866
WordPress Dinatur plugin <= 1.18 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67544
WordPress Shopkeeper Extender plugin < 7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27073
WordPress Addi – Cuotas que se adaptan a ti plugin <= 2.0.4 - Broken Authentication vulnerability
CVE-2026-25438
WordPress Gutenberg Blocks – Unlimited blocks For Gutenberg plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25443
WordPress Fraud Prevention For Woocommerce plugin <= 2.3.3 - Arbitrary Content Deletion vulnerability