← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2026-23544
WordPress Valenti theme <= 5.6.3.5 - PHP Object Injection vulnerability
CVE-2026-23542
WordPress Grand Restaurant theme <= 7.0.10 - PHP Object Injection vulnerability
CVE-2026-22521
WordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerability
CVE-2025-69373
WordPress VidoRev theme <= 2.9.9.9.9.9.7 - Local File Inclusion vulnerability
CVE-2025-69317
WordPress CarSpot theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-69298
WordPress Gauge theme <= 6.56.4 - Broken Access Control vulnerability
CVE-2025-69096
WordPress Zorka theme <= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-69098
WordPress Hide My WP plugin <= 6.2.12 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-69097
WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File Deletion vulnerability
CVE-2025-69085
WordPress JobBank plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability