← All credits
cazy | Patchstack Bug Bounty Program
11 vulnerability records and advisories credit this contributor.
CVE-2026-121768
WordPress Contact Form 7 – Post Fields plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-119499
WordPress FloristPress plugin <= 7.8.4 - Sensitive Data Exposure vulnerability
CVE-2026-62019
WordPress BookIt plugin <= 2.6.0.6 - Broken Access Control vulnerability
CVE-2026-110376
WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability
CVE-2026-111396
WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability
CVE-2026-103358
WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability
CVE-2026-103081
WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability
CVE-2026-108476
WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability
CVE-2026-103071
WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability
CVE-2026-102383
WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability