← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-32128
WordPress Nearby Locations Plugin <= 1.1.1 - SQL Injection vulnerability
CVE-2025-32547
WordPress All push notification for WP Plugin <= 1.5.3 - CSRF to SQL Injection vulnerability
CVE-2025-32196
WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32126
WordPress Pay with Contact Form 7 Plugin <= 1.0.4 - SQL Injection vulnerability
CVE-2025-32156
WordPress Just Post Preview Widget plugin <= 1.1.1 - Local File Inclusion vulnerability
CVE-2025-31084
WordPress Sunshine Photo Cart plugin <= 3.4.10 - PHP Object Injection Vulnerability
CVE-2025-31823
WordPress WPoperation Elementor Addons plugin 1.1.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31819
WordPress Nova Blocks by Pixelgrade plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26536
WordPress Another Events Calendar Plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23633
WordPress WP Database Audit plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability