← All credits
Muhammad Yudha - DJ | Patchstack Bug Bounty Program
360 vulnerability records and advisories credit this contributor.
CVE-2025-62907
WordPress Custom Post Type Attachment plugin <= 3.4.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62911
WordPress Rock Convert plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62913
WordPress Opal Service plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62910
WordPress Video Gallery by Huzzaz plugin <= 10.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62904
WordPress WP Geo plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62905
WordPress Query Posts plugin <= 0.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62903
WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62899
WordPress Photospace Responsive plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62898
WordPress Links shortcode plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62900
WordPress Popular Posts by Webline plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability