← All credits

mroccon | Patchstack Bug Bounty Program

27 vulnerability records and advisories credit this contributor.

CVE-2026-119490

WordPress Better Notifications for WP plugin <= 1.10.1 - Content Injection vulnerability

CVE-2026-119504

WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Cross Site Scripting (XSS) vulnerability

CVE-2026-123484

WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

CVE-2026-121763

WordPress Hummingbird plugin <= 3.21.2 - Cross Site Scripting (XSS) vulnerability

CVE-2026-121570

WordPress RSVP and Event Management plugin <= 2.7.17 - Cross Site Scripting (XSS) vulnerability

CVE-2026-123471

WordPress myCred plugin <= 4.0.2 - Content Injection vulnerability

CVE-2026-119484

WordPress Photo Gallery by Supsystic plugin <= 1.21.6 - Cross Site Request Forgery (CSRF) vulnerability

CVE-2026-119465

WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability

CVE-2026-119478

WordPress MasterStudy LMS plugin <= 3.7.56 - Content Injection vulnerability

CVE-2026-120848

WordPress WCFM Marketplace plugin <= 3.8.3 - Cross Site Scripting (XSS) vulnerability