← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-23913
WordPress Google Map Professional Plugin <= 1.0 - SQL Injection vulnerability
CVE-2025-22801
WordPress Free WooCommerce Theme 99fy Extension plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22527
WordPress Mailing Group Listserv Plugin <= 2.0.9 - SQL Injection vulnerability
CVE-2025-22504
WordPress 4ECPS Web Forms Plugin <= 0.2.18 - Arbitrary File Upload vulnerability
CVE-2024-56025
WordPress AdWork Media EZ Content Locker plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-55988
WordPress Navayan CSV Export Plugin <= 1.0.9 - SQL Injection vulnerability
CVE-2024-52457
WordPress Youneeq Recommendations plugin <= 3.0.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-52442
WordPress UserPlus plugin <= 2.0 - Privilege Escalation vulnerability
CVE-2024-52437
WordPress Banner System plugin <= 1.0.0 - Privilege Escalation vulnerability
CVE-2024-50430
WordPress Beaver Builder plugin <= 2.8.3.7 - Cross Site Scripting (XSS) vulnerability