gueco
Patchstack Bug Bounty Program
2 credited records · 2 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
17Monitor | CVE-2026-97267No exploit | WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerabilityminiorange · prevent files / folders access · CWE-862 | Medium4.3 | — | 0.2% | Sep 30, 2026 |
21Monitor | CVE-2026-97078No exploit | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerabilityboldgrid · client invoicing by sprout invoices · CWE-639 | Medium5.3 | — | 0.2% | Sep 30, 2026 |
- CVE-2026-9726717Monitor
WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability
MediumCVSS 4.3No exploitEPSS 0%miniorange · prevent files / folders accessSep 30, 2026
- CVE-2026-9707821Monitor
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability
MediumCVSS 5.3No exploitEPSS 0%boldgrid · client invoicing by sprout invoicesSep 30, 2026