← All credits
Phat RiO | Patchstack Bug Bounty Program
327 vulnerability records and advisories credit this contributor.
CVE-2025-60089
WordPress WP Gravity Forms FreshDesk plugin plugin <= 1.3.5 - Deserialization of untrusted data vulnerability
CVE-2025-60083
WordPress PDF Invoice Builder for WooCommerce plugin <= 6.5.0 - Deserialization of untrusted data vulnerability
CVE-2025-60082
WordPress PDF for WPForms plugin <= 6.5.0 - Deserialization of untrusted data vulnerability
CVE-2025-60081
WordPress PDF for Contact Form 7 plugin <= 6.5.0 - Deserialization of untrusted data vulnerability
CVE-2025-60080
WordPress PDF for Gravity Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability
CVE-2025-64353
WordPress Polylang plugin <= 3.7.3 - Deserialization of untrusted data vulnerability
CVE-2026-22341
WordPress Booked plugin <= 3.0.0 - Account Takeover vulnerability
CVE-2026-28138
WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability
CVE-2026-27388
WordPress DesignThemes Booking Manager plugin <= 2.0 - Broken Access Control vulnerability
CVE-2026-27396
WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability