← All credits
Skalucy | Patchstack Bug Bounty Program
155 vulnerability records and advisories credit this contributor.
CVE-2026-22356
WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability
CVE-2026-27371
WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68872
WordPress Eli's WordCents adSense Widget with Analytics plugin <= 1.3.03.27 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68851
WordPress Okay Toolkit plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68840
WordPress iRobots.txt SEO plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49342
WordPress Custom Style plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-49346
WordPress Simple Archive Generator plugin <= 5.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-52780
WordPress Logo Manager For Samandehi plugin <= 0.5 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-32664
WordPress Nepali Date Utilities plugin <= 1.0.15 - CSRF to Stored XSS vulnerability
CVE-2025-31467
WordPress Flickr Photostream plugin <= 3.1.8 - Reflected Cross Site Scripting (XSS) vulnerability