← All credits
hhhai | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-57401
WordPress SureDash plugin <= 1.8.0 - Arbitrary File Deletion vulnerability
CVE-2026-57621
WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability
CVE-2026-57643
WordPress WP Post Author plugin <= 3.9.1 - SQL Injection vulnerability
CVE-2026-57653
WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability
CVE-2026-54838
WordPress WC Vendors Marketplace plugin <= 2.6.8 - SQL Injection vulnerability
CVE-2026-54849
WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerability
CVE-2026-54818
WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
CVE-2026-42378
WordPress WP Full Stripe Free plugin <= 8.4.1 - Broken Authentication vulnerability
CVE-2026-42663
WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39451
WordPress WP Google Review Slider plugin <= 18.0 - Cross Site Scripting (XSS) vulnerability