← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2026-25006
WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode Execution vulnerability
CVE-2026-24955
WordPress Whizz Plugins plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24949
WordPress PhotoMe theme <= 5.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24948
WordPress Reflector plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24943
WordPress Grand Conference theme <= 5.3.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24635
WordPress EduBlink Core plugin <= 2.0.7 - Local File Inclusion vulnerability
CVE-2026-24600
WordPress Penci Review plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24601
WordPress Penci Pay Writer plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24531
WordPress Prowess theme <= 2.3 - Local File Inclusion vulnerability
CVE-2026-24390
WordPress Kentha Elementor Widgets plugin < 3.1 - Local File Inclusion vulnerability