Alliance bounty program
About Alliance Leaderboard Vulnerability database WordPress security
Login

Brandon Roldan

0
1
0
1
Twitter Github Website
28 November, 2022
Brandon Roldan
Alliance XP
389.1
Total reports
72
Reports, last 90 days
43
Contributions 72
Achievements Soon

Report WordPress vulnerabilities, earn prizes and become an Alliance member!

Join Patchstack Alliance

████

██████████████ █████ ███████████████████████████████████

+2 AXP

4.3

Pending

████

█████████████████████ █████ ████████████████████████████████████████████████████████

+5 AXP

5.4

Pending

████

█████████████████████ █████ █████████████████████████████████████████████████

+2 AXP

4.3

Pending

████

██████████████ █████ ████████████████████████████████████████████████████████

+5 AXP

5.4

Pending

████

██████████████ █████ ███████████████████████████████████

+10 AXP

5.3

Pending

████

███████ █████ ████████████████████████████████████████████████████████

+10 AXP

4.3

Pending

████

█████████████████████ █████ █████████████████████████████████████████████████

+6 AXP

4.3

Pending

████

██████████████ █████ █████████████████████████████████████████████████

+2 AXP

5.4

Pending

████

██████████████ █████ █████████████████████████████████████████████████

+6 AXP

4.3

Pending

████

█████████████████████ █████ ████████████████████████████████████████████████████████

+2 AXP

5.4

Pending

████

███████ █████ █████████████████████████████████████████████████

+10 AXP

4.3

Pending

████

███████ █████ ███████████████████████████████████

+2 AXP

4.3

Pending

████

█████████████████████ █████ ███████████████████████████████████

+8 AXP

4.3

Pending

████

█████████████████████ █████ ██████████████████████████████████████████

+2 AXP

4.3

Pending

████

██████████████ █████ ███████████████████████████████████

+10 AXP

5.3

Pending

████

█████████████████████ █████ ███████████████████████████████████

+8 AXP

4.3

Pending

████

█████████████████████ █████ ██████████████████████████████████████████

+2 AXP

5.4

Pending

████

█████████████████████ █████ ██████████████████████████████████████████

+8 AXP

5.4

Pending

████

██████████████ █████ ████████████████████████████████████████████████████████

+2 AXP

4.3

Pending

████

██████████████ █████ █████████████████████████████████████████████████

+2 AXP

4.3

Pending

████

█████████████████████ █████ █████████████████████████████████████████████████

+5 AXP

5.4

Pending

████

██████████████ █████ ███████████████████████████████████

+2 AXP

4.3

Pending

████

███████ █████ ██████████████████████████████████████████

+2 AXP

5.4

Pending

████

██████████████ █████ ██████████████████████████████████████████

+2 AXP

4.3

Pending

████

█████████████████████ █████ ███████████████████████████████████

+2 AXP

5.4

Pending

████

███████ █████ ██████████████████████████████████████████

+2 AXP

4.3

Pending

████

███████ █████ ███████████████████████████████████

+14 AXP

7.1

Pending

████

██████████████ █████ ██████████████████████████████████████████

+8 AXP

4.3

Pending

████

█████████████████████ █████ ███████████████████████████████████

+2 AXP

4.3

Pending

████

██████████████ █████ ████████████████████████████████████████████████████████

+2 AXP

4.3

Pending

████

███████ █████ █████████████████████████████████████████████████

+10 AXP

5.4

Pending

████

██████████████ █████ ████████████████████████████████████████████████████████

+2 AXP

5.4

Pending

████

██████████████ █████ █████████████████████████████████████████████████

+2 AXP

4.3

Pending

Plugin

WOOCS – WooCommerce Currency Switcher <= 1.4.1.4 Cross Site Request Forgery (CSRF) vulnerability

+8.1 AXP

5.4

6 days ago

Plugin

LiveChat <= 4.5.15 Cross Site Request Forgery (CSRF) vulnerability

+2.7 AXP

5.4

6 days ago

Plugin

WP Photo Album Plus <= 8.5.02.005 IP Bypass vulnerability

+10.6 AXP

5.3

6 days ago

Plugin

Business Directory Plugin <= 6.3.10 Cross Site Request Forgery (CSRF) vulnerability

+2.15 AXP

4.3

28 November, 2023

Plugin

Qode Essential Addons <= 1.5.2 Arbitrary plugin installation and Activation vulnerability

+19.8 AXP

9.9

27 November, 2023

Plugin

Legal Pages <= 1.3.8 Cross Site Request Forgery (CSRF) vulnerability

+2.7 AXP

5.4

16 November, 2023

Plugin

Profile Builder <= 3.10.3 Cross Site Request Forgery (CSRF) vulnerability

+8.1 AXP

5.4

8 November, 2023

Plugin

Top 10 <= 3.3.2 Cross Site Request Forgery (CSRF) vulnerability

+2.15 AXP

4.3

7 November, 2023

Plugin

WP Google My Business Auto Publish <= 3.7 Cross Site Request Forgery (CSRF) vulnerability

+2.7 AXP

5.4

7 November, 2023

Plugin

Kadence WooCommerce Email Designer <= 1.5.11 Cross Site Request Forgery (CSRF) vulnerability

+8.6 AXP

4.3

3 November, 2023

Theme

Newsmag <= 2.4.4 Reflected CrossSite Scripting (XSS) vulnerability

6.5

16 March, 2023

Theme

Activello <= 1.4.4 Auth. Reflected CrossSite Scripting (XSS) vulnerability

5.4

23 November, 2022

Theme

Activello <= 1.4.4 Auth. Reflected CrossSite Scripting (XSS) vulnerability

5.4

23 November, 2022

Plugin

Media Library Assistant <= 3.00 Unauthenticated Error Log Disclosure vulnerability

3.7

29 September, 2022

Plugin

iQ Block Country <= 1.2.18 Block BYPASS vulnerability

5.3

28 September, 2022

Plugin

wpForo Forum <= 2.0.5 CrossSite Request Forgery (CSRF) vulnerability

6.3

8 September, 2022

Plugin

WPIDE – File Manager & Code Editor <= 2.6 Authenticated Arbitrary File Read vulnerability

4.9

9 August, 2022

Plugin

MultiSafepay plugin for WooCommerce <= 4.15.0 Unauthenticated Arbitrary File Read vulnerability

5.3

18 July, 2022

Plugin

Shareaholic <= 9.7.5 Information Disclosure vulnerability

4.3

4 July, 2022

Plugin

MapSVG <= 6.2.19 Unauthenticated SQL Injection (SQLi) vulnerability

8.3

19 April, 2022

Plugin

HubSpot <= 8.8.13 Blind ServerSide Request Forgery (SSRF) vulnerability

6.4

11 April, 2022

Plugin

LifterLMS PayPal <= 1.3.0 Reflected CrossSite Scripting (XSS) vulnerability

6.1

4 April, 2022

Plugin

DW Question & Answer Pro <= 1.3.4 Multiple CrossSite Request Forgery (CSRF) vulnerabilities

5.4

29 March, 2022

Plugin

DW Question & Answer Pro <= 1.3.4 Arbitrary Comment Edition via IDOR vulnerability

6.5

29 March, 2022

Plugin

Plezi <= 1.0.2 Unauthenticated Stored CrossSite Scripting (XSS) vulnerability

6.1

7 March, 2022

Plugin

Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.6.2 Unauthenticated Stored CrossSite Scripting (XSS) vulnerability

6.1

7 March, 2022

Plugin

FormCraft 3 <= 3.8.27 Unauthenticated ServerSide Request Forgery (SSRF) vulnerability

5.3

28 February, 2022

Plugin

WP Voting Contest <= 2.1 Reflected CrossSite Scripting (XSS) vulnerability

6.1

16 February, 2022

Plugin

AnyComment <= 0.2.17 Comment Rating Increase/Decrease via Race Condition vulnerability

4.3

19 January, 2022

Plugin

AnyComment <= 0.2.17 Arbitrary HyperComments Import/Revert via CSRF vulnerability

4.6

19 January, 2022

Plugin

BP Better Messages <= 1.9.9.148 CrossSite Request Forgery (CSRF) vulnerability

3.1

18 January, 2022

Plugin

SupportCandy <= 2.2.6 Arbitrary Ticket Deletion via CrossSite Request Forgery (CSRF) vulnerability

5.4

5 January, 2022

Plugin

SupportCandy <= 2.2.4 Unauthenticated Arbitrary Ticket Deletion vulnerability

6.5

5 January, 2022

Plugin

AnyComment <= 0.3.4 Open Redirect vulnerability

6.5

20 December, 2021

Plugin

Tab – Accordion, FAQ <= 1.3.1 Unauthenticated AJAX Calls vulnerability

5.3

6 December, 2021

Plugin

Support Board <= 3.3.5 Arbitrary File Deletion via CrossSite Request Forgery (CSRF) vulnerability

5.4

18 October, 2021

Plugin

wpDiscuz <= 7.3.3 CrossSite Request Forgery (CSRF) vulnerability leading to Arbitrary Comment Addition/Edition/Deletion

5.4

11 October, 2021

Plugin

BP Better Messages <= 1.9.9.37 CrossSite Request Forgery (CSRF) vulnerability

+0 AXP

4.6

4 October, 2021

Plugin

BP Better Messages <= 1.9.9.37 Reflected CrossSite Scripting (XSS) vulnerability

6.1

4 October, 2021

Back to top

Solutions

WordPress security Vulnerability database Vulnerability API Bug bounty program Plugin auditing Active security programs NEW

WordPress security

Pricing & features For care plans For hosts For plugin developers NEW Documentation

Patchstack

About us Careers Media Kit Articles & insight Whitepaper 2022

Social

DPA Privacy Policy Terms & Conditions © 2023 Patchstack

Solutions

WordPress security Vulnerability database Vulnerability API Bug bounty program Plugin auditing Active security programs NEW

WordPress security

Pricing & features For care plans For hosts For plugin developers NEW Documentation

Patchstack

About us Careers Media Kit Articles & insight Whitepaper 2022

Social

Let us know if we have missed a vulnerability reported elsewhere

Report arrow right Close

Thank you for contributing!

Successfully submit vulnerabilities and receive an invite to our Alliance platform.

Learn more arrow right Close