← All credits
Tarcísio Luchesi(Poystick) | Patchstack Bug Bounty Program
16 vulnerability records and advisories credit this contributor.
CVE-2026-114196
WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability
CVE-2026-112862
WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability
CVE-2026-112860
WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability
CVE-2026-112861
WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-109686
WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability
CVE-2026-94675
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94669
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerability
CVE-2026-96338
WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61957
WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57638
WordPress Fluent Booking plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability