← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2024-50496
WordPress AR For WordPress plugin <= 6.6 - Arbitrary File Upload vulnerability
CVE-2024-50449
WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability
CVE-2024-50439
WordPress Astra Widgets plugin <= 1.2.14 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-49702
WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49703
WordPress WpEvently plugin <= 4.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49615
WordPress SafetyForms plugin <= 1.0.0 - CSRF to SQL Injection vulnerability
CVE-2024-49622
WordPress Apa Banner Slider plugin <= 1.0.0 - CSRF to SQL Injection vulnerability
CVE-2024-49243
WordPress Dynamic Elementor Addons plugin <= 1.0.0 - Local File Inclusion vulnerability
CVE-2025-68900
WordPress Enfold theme <= 7.1.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39716
WordPress Flipmart theme <= 2.8 - Broken Access Control vulnerability