hackthesoul
Patchstack Bug Bounty Program
4 credited records · 4 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2026-39801No exploit | WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerabilitysergey · aiwu · CWE-266 | Critical9.8 | — | 0.4% | Oct 10, 2026 |
28Monitor | CVE-2026-73351No exploit | WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerabilityminiorange · wordpress social login and register · CWE-79 | High7.1 | — | 0.2% | Aug 18, 2026 |
32Monitor | CVE-2026-73350No exploit | WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerabilitypsm plugins · supportcandy · CWE-266 | High8.2 | — | 0.4% | Aug 18, 2026 |
25Monitor | CVE-2026-11783No exploit | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Custom+) Stored Cross-Site Scripting via Product SKUdokaninc · dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy · CWE-79 | Medium6.4 | — | 0.3% | Jun 27, 2026 |
- CVE-2026-3980139Monitor
WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerability
CriticalCVSS 9.8No exploitEPSS 0%sergey · aiwuOct 10, 2026
- CVE-2026-7335128Monitor
WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%miniorange · wordpress social login and registerAug 18, 2026
- CVE-2026-7335032Monitor
WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability
HighCVSS 8.2No exploitEPSS 0%psm plugins · supportcandyAug 18, 2026
- CVE-2026-1178325Monitor
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Custom+) Stored Cross-Site Scripting via Product SKU
MediumCVSS 6.4No exploitEPSS 0%dokaninc · dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsyJun 27, 2026