← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-64206
WordPress Jannah theme <= 7.6.0 - PHP Object Injection vulnerability
CVE-2025-64204
WordPress SmartMag theme <= 10.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64203
WordPress Mailster plugin < 4.1.14 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64202
WordPress Sahifa theme < 5.8.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64198
WordPress Easy Social Share Buttons plugin < 10.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64197
WordPress Rehub theme < 19.9.9.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64195
WordPress Eduma theme <= 5.7.6 - Local File Inclusion vulnerability
CVE-2025-64194
WordPress Eduma theme <= 5.7.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28127
WordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28115
WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - SQL Injection vulnerability