← All credits

dzaku | Patchstack Bug Bounty Program

31 vulnerability records and advisories credit this contributor.

CVE-2026-109894

WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability

CVE-2026-108485

WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerability

CVE-2026-110902

WordPress Event Tickets plugin <= 5.30.1 - Insecure Direct Object References (IDOR) vulnerability

CVE-2026-109895

WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability

CVE-2026-110888

WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

CVE-2026-110375

WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

CVE-2026-109893

WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability

CVE-2026-110903

WordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerability

CVE-2026-109688

WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

CVE-2026-108495

WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability