← All credits
dutafi | Patchstack Bug Bounty Program
80 vulnerability records and advisories credit this contributor.
CVE-2026-39726
WordPress Lumise Product Designer plugin < 2.1.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115603
WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability
CVE-2026-39799
WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78534
WordPress Educavo theme <= 3.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39790
WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32569
WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32572
WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32575
WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32580
WordPress WooCommerce Lottery plugin <= 2.2.9 - SQL Injection vulnerability
CVE-2026-39748
WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability