← All credits

Peter Tang | Patchstack Bug Bounty Program

65 vulnerability records and advisories credit this contributor.

CVE-2026-110373

WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability

CVE-2026-111406

WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability

CVE-2026-110897

WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability

CVE-2026-110891

WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability

CVE-2026-110361

WordPress Infinite Uploads plugin <= 3.4.1 - Sensitive Data Exposure vulnerability

CVE-2026-110367

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

CVE-2026-103350

WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability

CVE-2026-107421

WordPress Broadcast Live Video plugin <= 7.3.2 - Session Hijacking vulnerability

CVE-2026-107425

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability

CVE-2026-107417

WordPress Push Notification for Post and BuddyPress plugin <= 3.23 - Broken Access Control vulnerability