← All credits
hhhai | Patchstack Bug Bounty Program
61 vulnerability records and advisories credit this contributor.
CVE-2026-39520
WordPress weDocs plugin <= 2.1.18 - Broken Access Control vulnerability
CVE-2026-32521
WordPress WP Custom Admin Interface plugin <= 7.42 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32413
WordPress Permalink Manager Lite plugin < 2.5.3 - Broken Access Control vulnerability
CVE-2026-32406
WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability
CVE-2025-67978
WordPress Educare plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67626
WordPress WP SEO Search plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-27050
WordPress RealPress plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-27044
WordPress Total Poll Lite plugin <= 4.12.0 - Remote Code Execution (RCE) vulnerability
CVE-2026-24997
WordPress Wired Impact Volunteer Management plugin <= 2.8 - Broken Access Control vulnerability
CVE-2026-24990
WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability