← All credits
Oly Hossen | Patchstack Bug Bounty Program
27 vulnerability records and advisories credit this contributor.
CVE-2026-120856
WordPress Invoice Gateway for WooCommerce – Invoice Payment Gateway plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-122670
WordPress Polylang plugin <= 3.9 - Broken Access Control vulnerability
CVE-2026-119502
WordPress Ultimate Store Kit Elementor Addons plugin <= 4.0.1 - Broken Access Control vulnerability
CVE-2026-120837
WordPress Everest Forms plugin <= 3.6.3 - Broken Access Control vulnerability
CVE-2026-120836
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Broken Access Control vulnerability
CVE-2026-114183
WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability
CVE-2026-119466
WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-115591
WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability
CVE-2026-42703
WordPress Kali Forms plugin <= 2.4.27 - Broken Access Control vulnerability
CVE-2026-115963
WordPress Broadcast Live Video plugin <= 7.3.9 - Broken Access Control vulnerability