← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-23678
WordPress LocalGrid plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23583
WordPress Explara Membership plugin <= 0.0.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23944
WordPress WOOEXIM Plugin <= 5.0.0 - PHP Object Injection vulnerability
CVE-2025-23758
WordPress pootle button plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23681
WordPress REDIRECTION PLUS plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23506
WordPress WP IMAP Auth plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22733
WordPress My auctions allegro Plugin <= 3.6.18 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23780
WordPress Easy Code Snippets Plugin <= 1.0.2 - SQL Injection vulnerability
CVE-2025-23911
WordPress Solidres – Hotel booking plugin for WordPress Plugin <= 0.9.4 - SQL Injection vulnerability
CVE-2025-23912
WordPress WordPress Custom Sidebar Plugin <= 2.3 - SQL Injection vulnerability