← All credits
dutafi | Patchstack Bug Bounty Program
80 vulnerability records and advisories credit this contributor.
CVE-2026-65438
WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57374
WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57370
WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.9.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-57427
WordPress Download Monitor - WPForms Lock plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57735
WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57809
WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-59517
WordPress Easy Form Builder plugin <= 4.0.12 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57716
WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability
CVE-2026-57428
WordPress Sprout Clients plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57703
WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability