← All credits
hhhai | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-54197
WordPress GetGenie plugin <= 4.4.1 - Sensitive Data Exposure vulnerability
CVE-2026-42686
WordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42687
WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability
CVE-2026-0677
WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerability
CVE-2026-42684
WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability
CVE-2026-42685
WordPress WP Job Portal plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42681
WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-42733
WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42740
WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability
CVE-2026-42750
WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability