← All credits
Steven Julian | Patchstack Bug Bounty Program
26 vulnerability records and advisories credit this contributor.
CVE-2026-65488
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2026-65489
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability
CVE-2026-32464
WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability
CVE-2026-32465
WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability
CVE-2026-66654
WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-57619
WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability
CVE-2024-33909
WordPress iPages Flipbook plugin <= 1.5.1 - Broken Access Control vulnerability
CVE-2024-32949
WordPress Integrate Google Drive plugin <= 1.3.8 - Broken Access Control vulnerability
CVE-2026-39463
WordPress ManageWP Worker plugin <= 4.9.31 - Cross Site Scripting (XSS) vulnerability
CVE-2026-48973
WordPress SVG Support plugin <= 2.5.14 - Broken Access Control vulnerability