← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-69053
WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49936
WordPress WoodMart theme < 8.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49901
WordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerability
CVE-2025-58961
WordPress CF7 Auto Responder Addon plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-58638
WordPress Institutions Directory Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-39534
WordPress Terms Dictionary Plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68543
WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability
CVE-2025-68539
WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability
CVE-2025-68538
WordPress Craft | Coffee Shop Cafe Restaurant WordPress theme <= 2.3.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68536
WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability