← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-67964
WordPress Homey Core plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67960
WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67959
WordPress WorkScout theme <= 4.1.07 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67957
WordPress Listivo Core plugin <= 2.3.77 - Local File Inclusion vulnerability
CVE-2025-67952
WordPress Grand Tour theme < 5.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67949
WordPress Hostiko theme < 94.3.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67947
WordPress AdForest Elementor plugin <= 3.0.11 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67946
WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability
CVE-2025-67573
WordPress Sailing theme < 4.4.6 - Broken Access Control vulnerability
CVE-2025-67572
WordPress PenNews theme < 6.7.4 - Broken Access Control vulnerability