Dexx-tech
Patchstack Bug Bounty Program
6 credited records · 6 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
29Monitor | CVE-2026-126813No exploit | Roundcube Webmail before 1.6.21 and 1.7.6 IMAP Command Injection via _uidroundcube · webmail · CWE-93 | High7.4 | — | 1.0% | 2 days ago |
28Monitor | CVE-2026-122666No exploit | WordPress Mang Board WP plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerabilitykitae park · mang board wp · CWE-79 | High7.1 | — | 0.1% | 4 days ago |
39Monitor | CVE-2026-39738No exploit | WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerabilityfunnelkit · funnelkit automations · CWE-502 | Critical9.8 | — | 0.4% | Oct 30, 2026 |
27Monitor | CVE-2026-116746No exploit | QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreviewqloapps · qloapps · CWE-639 | Medium6.9 | — | 0.2% | Oct 26, 2026 |
27Monitor | CVE-2026-116745No exploit | QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmationqloapps · qloapps · CWE-639 | Medium6.9 | — | 0.2% | Oct 26, 2026 |
21Monitor | CVE-2026-107706No exploit | Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.phpdolibarr · dolibarr · CWE-863 | Medium5.3 | — | 0.1% | Oct 8, 2026 |
- CVE-2026-12681329Monitor
Roundcube Webmail before 1.6.21 and 1.7.6 IMAP Command Injection via _uid
HighCVSS 7.4No exploitEPSS 1%roundcube · webmail2 days ago
- CVE-2026-12266628Monitor
WordPress Mang Board WP plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%kitae park · mang board wp4 days ago
- CVE-2026-3973839Monitor
WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%funnelkit · funnelkit automationsOct 30, 2026
- CVE-2026-11674627Monitor
QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreview
MediumCVSS 6.9No exploitEPSS 0%qloapps · qloappsOct 26, 2026
- CVE-2026-11674527Monitor
QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmation
MediumCVSS 6.9No exploitEPSS 0%qloapps · qloappsOct 26, 2026
- CVE-2026-10770621Monitor
Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.php
MediumCVSS 5.3No exploitEPSS 0%dolibarr · dolibarrOct 8, 2026