← All credits

Nixxies | Patchstack Bug Bounty Program

15 vulnerability records and advisories credit this contributor.

CVE-2026-114188

WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

CVE-2026-119488

WordPress Pie Register plugin <= 3.8.4.15 - Cross Site Scripting (XSS) vulnerability

WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

CVE-2026-111834

WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability

CVE-2026-111397

WordPress MapSVG plugin <= 8.16.1 - Sensitive Data Exposure vulnerability

CVE-2026-108480

WordPress Skydropx plugin <= 2.1.4 - Broken Access Control vulnerability

WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

CVE-2026-105070

WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability

CVE-2026-105062

WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability

CVE-2026-100514

WordPress REST API Log plugin <= 1.7.2 - Insecure Direct Object References (IDOR) vulnerability