← All credits

mroccon | Patchstack Bug Bounty Program

27 vulnerability records and advisories credit this contributor.

CVE-2026-119510

WordPress MC Woocommerce Wishlist plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

CVE-2026-120849

WordPress WCFM Marketplace plugin <= 3.8.3 - Broken Access Control vulnerability

WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability

WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerability

WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

CVE-2026-116386

WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability

CVE-2026-116399

WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability

WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability

CVE-2026-116846

WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerability

CVE-2026-118093

WordPress Product Feed Manager plugin <= 7.14.1 - Broken Access Control vulnerability