← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2026-27352
WordPress Starto theme < 2.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27343
WordPress Airtifact theme <= 1.2.91 - Local File Inclusion vulnerability
CVE-2026-27334
WordPress Alchemists theme <= 4.6.0 - Local File Inclusion vulnerability
CVE-2026-27328
WordPress EduBlink theme <= 2.0.7 - Broken Access Control vulnerability
CVE-2026-27088
WordPress Darna Framework plugin <= 2.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-27087
WordPress Wolverine Framework plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-27059
WordPress Penci Recipe plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27057
WordPress Penci Filter Everything plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27058
WordPress Penci Podcast plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27069
WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability