← All credits

dzaku | Patchstack Bug Bounty Program

31 vulnerability records and advisories credit this contributor.

CVE-2026-119496

WordPress Media LIbrary Assistant plugin <= 3.43 - Content Injection vulnerability

CVE-2026-119492

WordPress Ditty plugin <= 3.1.71 - Content Injection vulnerability

CVE-2026-120845

WordPress Smush Image Compression and Optimization plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability

CVE-2026-119493

WordPress Ditty plugin <= 3.1.71 - Cross Site Scripting (XSS) vulnerability

CVE-2026-119500

WordPress Flash & HTML5 Video plugin <= 2.14.1 - Cross Site Scripting (XSS) vulnerability

CVE-2026-119501

WordPress Element Pack Elementor Addons plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability

CVE-2026-123472

WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Cross Site Scripting (XSS) vulnerability

CVE-2026-119494

WordPress Site Reviews plugin <= 8.3.6 - Content Injection vulnerability

CVE-2026-119521

WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

CVE-2026-119481

WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability