← All credits
hhhai | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-42755
WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability
CVE-2026-42757
WordPress WebinarIgnition plugin < 4.08.253 - Arbitrary File Deletion vulnerability
CVE-2026-42758
WordPress WebinarIgnition plugin < 4.08.253 - Privilege Escalation vulnerability
CVE-2026-42761
WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability
CVE-2026-45438
WordPress Smart Coupons for WooCommerce plugin < 2.3.0 - Broken Access Control vulnerability
CVE-2026-39694
WordPress Simply Schedule Appointments plugin <= 1.6.10.2 - Broken Access Control vulnerability
CVE-2026-39644
WordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerability
CVE-2026-39640
WordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerability
CVE-2026-39615
WordPress Download Manager plugin <= 3.3.53 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39528
WordPress WP Delicious plugin <= 1.9.5 - Broken Access Control vulnerability