← All credits

Oly Hossen | Patchstack Bug Bounty Program

27 vulnerability records and advisories credit this contributor.

CVE-2026-112827

WordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin <= 1.0.10 - Broken Access Control vulnerability

CVE-2026-115611

WordPress TableOn plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

CVE-2026-114710

WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

CVE-2026-115949

WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Broken Access Control vulnerability

CVE-2026-111401

WordPress Tailored Tools plugin <= 3.0.3 - Cross Site Request Forgery (CSRF) vulnerability

CVE-2026-111847

WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerability

CVE-2026-110378

WordPress Ninja Forms Signature Contract Add-On plugin <= 3.2.5 - Broken Access Control vulnerability

CVE-2026-108492

WordPress Quick Paypal Payments plugin <= 6.0.3 - Broken Access Control vulnerability

CVE-2026-111409

WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerability

CVE-2026-107863

WordPress Products Restricted Users for WooCommerce plugin <= 0.7 - Broken Access Control vulnerability