← All credits
Phat RiO | Patchstack Bug Bounty Program
327 vulnerability records and advisories credit this contributor.
CVE-2026-24378
WordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerability
CVE-2026-23971
WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability
CVE-2026-23549
WordPress WpEvently plugin <= 5.1.1 - PHP Object Injection vulnerability
CVE-2026-23547
WordPress CMSMasters Content Composer plugin <= 2.5.8 - Broken Access Control vulnerability
CVE-2025-69393
WordPress Exzo theme <= 1.2.4 - Broken Access Control vulnerability
CVE-2025-69378
WordPress Product Filter for WooCommerce plugin <= 9.1.2 - Privilege Escalation vulnerability
CVE-2025-69352
WordPress The Events Calendar plugin <= 6.15.12.2 - Broken Access Control vulnerability
CVE-2025-69340
WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability
CVE-2025-69341
WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability
CVE-2025-69303
WordPress ModelTheme Framework plugin < 2.0.0 - Broken Access Control vulnerability