← All credits
Phat RiO | Patchstack Bug Bounty Program
327 vulnerability records and advisories credit this contributor.
CVE-2025-52807
WordPress Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Local File Inclusion Vulnerability
CVE-2025-49924
WordPress Wholesale Suite plugin <= 2.2.4.2 - Privilege Escalation vulnerability
CVE-2025-49511
WordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerability
CVE-2025-49444
WordPress Reformer for Elementor plugin <= 1.0.5 - Arbitrary File Upload Vulnerability
CVE-2025-49418
WordPress Allmart plugin <= 1.0.0 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-49417
WordPress WooCommerce Product Multi-Action plugin <= 1.3 - Deserialization of untrusted data Vulnerability
CVE-2025-49387
WordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability
CVE-2025-49313
WordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerability
CVE-2025-49314
WordPress BRW plugin <= 1.8.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49260
WordPress Aora theme <= 1.3.9 - Local File Inclusion Vulnerability