← All credits
hhhai | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-119516
WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - PHP Object Injection vulnerability
CVE-2026-111398
WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Deletion vulnerability
CVE-2026-111399
WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability
CVE-2026-107862
WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62116
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39752
WordPress Jobs for WordPress plugin <= 2.8.2 - Arbitrary File Deletion vulnerability
CVE-2026-73992
WordPress Query Wrangler plugin <= 1.5.57 - Remote Code Execution (RCE) vulnerability
CVE-2026-28567
WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability
CVE-2026-27537
WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66452
WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access Control vulnerability