← All credits
hhhai | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-28139
WordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerability
CVE-2026-59553
WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59555
WordPress Participants Database plugin <= 2.7.8.3 - Arbitrary File Deletion vulnerability
CVE-2026-57696
WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability
CVE-2026-61947
WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65510
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57402
WordPress Flexible Refund and Return Order for WooCommerce plugin <= 1.0.51 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57404
WordPress Booking and Rental Manager plugin <= 2.6.9 - Broken Access Control vulnerability
CVE-2026-57409
WordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57371
WordPress WPJAM Basic plugin <= 7.0 - PHP Object Injection vulnerability