← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2026-27086
WordPress WoodMart theme < 8.3.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28150
WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability
CVE-2026-66673
WordPress Flatastic theme <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-73389
WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability
CVE-2026-66672
WordPress Flatastic theme <= 2.0 - PHP Object Injection vulnerability
CVE-2026-73387
WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability
CVE-2026-32333
WordPress Mayosis Core plugin <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28570
WordPress Vavo Core plugin <= 2.3.0 - Local File Inclusion vulnerability
CVE-2026-65480
WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57804
WordPress TheGem Theme Elements (for Elementor) plugin < 5.12.1.1 - Local File Inclusion vulnerability