← All credits
dutafi | Patchstack Bug Bounty Program
80 vulnerability records and advisories credit this contributor.
CVE-2026-68568
WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability
CVE-2026-61960
WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66446
WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability
CVE-2026-61966
WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability
CVE-2026-66663
WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28082
WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65560
WordPress Houzez Property Feed plugin <= 2.5.48 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66694
WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65515
WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61961
WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability