Brobicho
Patchstack Bug Bounty Program
4 credited records · 4 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2026-97280No exploit | WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerabilitymamunur rashid · review schema · CWE-862 | Medium6.5 | — | 0.2% | Oct 1, 2026 |
21Monitor | CVE-2026-62081No exploit | WordPress Flexible PDF Coupons plugin <= 1.14.11 - Insecure Direct Object References (IDOR) vulnerabilitywpdesk · flexible pdf coupons · CWE-639 | Medium5.4 | — | 0.2% | Sep 30, 2026 |
21Monitor | CVE-2026-94679No exploit | WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerabilitywpmanageninja · fluent support · CWE-862 | Medium5.4 | — | 0.2% | Sep 23, 2026 |
21Monitor | CVE-2026-84771No exploit | WordPress PublishPress Permissions plugin <= 4.8.3 - Insecure Direct Object References (IDOR) vulnerabilitypublishpress · publishpress permissions · CWE-639 | Medium5.3 | — | 0.3% | Sep 2, 2026 |
- CVE-2026-9728026Monitor
WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerability
MediumCVSS 6.5No exploitEPSS 0%mamunur rashid · review schemaOct 1, 2026
- CVE-2026-6208121Monitor
WordPress Flexible PDF Coupons plugin <= 1.14.11 - Insecure Direct Object References (IDOR) vulnerability
MediumCVSS 5.4No exploitEPSS 0%wpdesk · flexible pdf couponsSep 30, 2026
- CVE-2026-9467921Monitor
WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerability
MediumCVSS 5.4No exploitEPSS 0%wpmanageninja · fluent supportSep 23, 2026
- CVE-2026-8477121Monitor
WordPress PublishPress Permissions plugin <= 4.8.3 - Insecure Direct Object References (IDOR) vulnerability
MediumCVSS 5.3No exploitEPSS 0%publishpress · publishpress permissionsSep 2, 2026