← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2026-25305
WordPress XStore theme <= 9.6.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25027
WordPress Unicamp theme <= 2.7.1 - Local File Inclusion vulnerability
CVE-2026-25032
WordPress Ricky theme < 2.31 - PHP Object Injection vulnerability
CVE-2026-25029
WordPress KIDZ theme <= 5.24 - PHP Object Injection vulnerability
CVE-2026-25030
WordPress Goldish theme < 3.47 - PHP Object Injection vulnerability
CVE-2026-25033
WordPress Motta Addons plugin < 1.6.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25031
WordPress Tasty Daily theme < 1.27 - PHP Object Injection vulnerability
CVE-2026-25018
WordPress NaturaLife Extensions plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25017
WordPress NaturaLife Extensions plugin <= 2.1 - Local File Inclusion vulnerability
CVE-2026-25013
WordPress Phox Hosting plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability