← All credits
ParkHyunWoo | Patchstack Bug Bounty Program
33 vulnerability records and advisories credit this contributor.
CVE-2026-39723
WordPress Morning for WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability
CVE-2026-39719
WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39727
WordPress WC Fields Factory plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39728
WordPress Instapage Plugin plugin <= 3.7.2 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39731
WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39758
WordPress Midtrans-WooCommerce plugin <= 2.32.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-95513
WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Broken Access Control vulnerability
CVE-2026-84848
WordPress Quick Event Manager plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73338
WordPress Autopay plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65526
WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability