← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2026-57805
WordPress Tonda theme <= 2.5 - Local File Inclusion vulnerability
CVE-2026-57343
WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27412
WordPress Pearl - Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerability
CVE-2025-69155
WordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69133
WordPress Tourmaster plugin <= 5.4.5 - Local File Inclusion vulnerability
CVE-2025-69156
WordPress Kids Zone - Children WordPress Theme theme <= 5.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27414
WordPress Werkstatt theme <= 4.8.3 - PHP Object Injection vulnerability
CVE-2026-57349
WordPress WPeMatico RSS Feed Fetcher plugin <= 2.8.17 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27430
WordPress TheFox theme <= 3.9.76 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-27408
WordPress NativeChurch theme <= 4.8.8.2 - Reflected Cross Site Scripting (XSS) vulnerability