rpgsec
Patchstack Bug Bounty Program
3 credited records · 3 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2026-97274No exploit | WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerabilityminiorange · oauth single sign on – sso (oauth client) · CWE-290 | Critical9.8 | — | 0.2% | Sep 30, 2026 |
21Monitor | CVE-2026-94673No exploit | WordPress Simply Schedule Appointments plugin <= 1.6.12.31 - Insecure Direct Object References (IDOR) vulnerabilitynsquared · simply schedule appointments · CWE-639 | Medium5.3 | — | 0.2% | Sep 30, 2026 |
36Monitor | CVE-2026-94389No exploit | WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerabilityacymailing newsletter team · acymailing smtp newsletter · CWE-94 | Critical9.0 | — | 0.4% | Sep 30, 2026 |
- CVE-2026-9727439Monitor
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
CriticalCVSS 9.8No exploitEPSS 0%miniorange · oauth single sign on – sso (oauth client)Sep 30, 2026
- CVE-2026-9467321Monitor
WordPress Simply Schedule Appointments plugin <= 1.6.12.31 - Insecure Direct Object References (IDOR) vulnerability
MediumCVSS 5.3No exploitEPSS 0%nsquared · simply schedule appointmentsSep 30, 2026
- CVE-2026-9438936Monitor
WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability
CriticalCVSS 9.0No exploitEPSS 0%acymailing newsletter team · acymailing smtp newsletterSep 30, 2026