← All credits
Phat RiO | Patchstack Bug Bounty Program
327 vulnerability records and advisories credit this contributor.
CVE-2026-27389
WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability
CVE-2026-27390
WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability
CVE-2026-27386
WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability
CVE-2026-27385
WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-27374
WordPress WooCommerce Order Details plugin <= 3.1 - Broken Access Control vulnerability
CVE-2026-27362
WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Broken Access Control vulnerability
CVE-2026-27363
WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27354
WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27361
WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability
CVE-2026-27052
WordPress Sales Countdown Timer for WooCommerce and WordPress plugin < 1.1.9 - Local File Inclusion vulnerability