← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2026-24391
WordPress Car Dealer theme <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24367
WordPress Traveler theme < 3.2.8 - SQL Injection vulnerability
CVE-2026-23974
WordPress Golo theme < 1.7.5 - Broken Access Control vulnerability
CVE-2026-23973
WordPress Golo theme < 1.7.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-23979
WordPress Gyan Elements plugin <= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24355
WordPress Houzez Theme - Functionality plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-23975
WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability
CVE-2026-24354
WordPress Penci Shortcodes & Performance plugin <= 6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-23978
WordPress Gyan Elements plugin <= 2.2.1 - Local File Inclusion vulnerability
CVE-2026-23801
WordPress The Issue theme <= 1.6.11 - Local File Inclusion vulnerability