← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2026-27055
WordPress Penci AI SmartContent Creator plugin <= 2.0 - Broken Access Control vulnerability
CVE-2026-27054
WordPress Penci Soledad Data Migrator plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25472
WordPress Fusion Builder plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25400
WordPress Apicona theme <= 24.1.0 - PHP Object Injection vulnerability
CVE-2026-25373
WordPress Vayvo - Media Streaming & Membership WordPress Theme theme < 6.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25367
WordPress CitiLights theme < 3.7.2 - Broken Access Control vulnerability
CVE-2026-25342
WordPress Boutique theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25326
WordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerability
CVE-2026-25307
WordPress XStore Core plugin < 5.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25306
WordPress XStore Core plugin <= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability