← All credits
Phat RiO | Patchstack Bug Bounty Program
327 vulnerability records and advisories credit this contributor.
CVE-2025-49067
WordPress Nasa Core plugin < 6.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32686
WordPress Team Members plugin <= 3.4.4 - PHP Object Injection Vulnerability
CVE-2025-32122
WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
CVE-2025-31910
WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability
CVE-2025-30992
WordPress Puca theme <= 2.6.33 - Local File Inclusion Vulnerability
CVE-2025-30970
WordPress Easy Contact plugin <= 0.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-30828
WordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerability
CVE-2025-30806
WordPress Vimeotheque plugin <= 2.3.4.2 - SQL Injection vulnerability
CVE-2025-28946
WordPress PrintXtore theme < 1.7.8 - Local File Inclusion vulnerability
CVE-2025-28888
WordPress GiftXtore theme < 1.7.7 - Local File Inclusion vulnerability