← All credits

Mor Golan | Patchstack Bug Bounty Program

10 vulnerability records and advisories credit this contributor.

CVE-2026-122675

WordPress Wp Social plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Transliterator plugin <= 2.5.13 - SQL Injection vulnerability

WordPress Easy Property Listings plugin <= 3.5.25 - Cross Site Scripting (XSS) vulnerability

CVE-2026-115596

WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability

CVE-2026-112869

WordPress We’re Open! plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability

CVE-2026-112222

WordPress Surfer plugin <= 1.8.0.744 - Broken Access Control vulnerability

WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerability

WordPress UsersWP plugin <= 1.2.73 - Cross Site Scripting (XSS) vulnerability

WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability

WordPress Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability