Expatch
Patchstack Bug Bounty Program
3 credited records · 3 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2026-65494No exploit | WordPress Dokan Pro plugin <= 5.0.2 - SQL Injection vulnerabilitydokan · dokan pro · CWE-89 | High7.1 | — | 0.3% | Jul 23, 2026 |
30Monitor | CVE-2026-65493No exploit | WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerabilitydokan · dokan pro · CWE-502 | High7.5 | — | 0.4% | Jul 23, 2026 |
37Monitor | CVE-2026-54825No exploit | WordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerabilitywpdatatables · wpdatatables · CWE-89 | Critical9.3 | — | 0.4% | Jun 26, 2026 |
- CVE-2026-6549428Monitor
WordPress Dokan Pro plugin <= 5.0.2 - SQL Injection vulnerability
HighCVSS 7.1No exploitEPSS 0%dokan · dokan proJul 23, 2026
- CVE-2026-6549330Monitor
WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability
HighCVSS 7.5No exploitEPSS 0%dokan · dokan proJul 23, 2026
- CVE-2026-5482537Monitor
WordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerability
CriticalCVSS 9.3No exploitEPSS 0%wpdatatables · wpdatatablesJun 26, 2026