← All credits
dutafi | Patchstack Bug Bounty Program
80 vulnerability records and advisories credit this contributor.
CVE-2026-57682
WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57358
WordPress Customize My Account for WooCommerce plugin <= 4.3.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-57670
WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57338
WordPress ARForms plugin <= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-56047
WordPress perfmatters plugin <= 2.6.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-56032
WordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerability
CVE-2026-49107
WordPress Thrive Apprentice plugin < 10.8.10.2 - PHP Object Injection vulnerability
CVE-2026-49778
WordPress WPFunnels Pro plugin <= 2.9.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-49073
WordPress Directorist Booking plugin <= 3.0.3 - SQL Injection vulnerability
CVE-2025-68974
WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability