← All credits
dodoh4t | Patchstack Bug Bounty Program
53 vulnerability records and advisories credit this contributor.
CVE-2026-49775
WordPress Welcart e-Commerce plugin <= 2.11.28 - Broken Access Control vulnerability
CVE-2026-52692
WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability
CVE-2026-52699
WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-52702
WordPress SEO Redirection plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42736
WordPress BP Better Messages plugin <= 2.14.16 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-42737
WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerability
CVE-2026-42749
WordPress Disable Comments for Any Post Types (Remove comments) plugin <= 1.3.0 - Broken Authentication vulnerability
CVE-2026-42751
WordPress Booking Manager plugin <= 2.1.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42754
WordPress Favicon plugin <= 1.3.46 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42756
WordPress QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly plugin <= 3.2.7 - Arbitrary File Deletion vulnerability