← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-60110
WordPress AllInOne - Banner Rotator Plugin <= 3.8 - SQL Injection Vulnerability
CVE-2025-60108
WordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin <= 3.8 - SQL Injection Vulnerability
CVE-2025-60109
WordPress LambertGroup - AllInOne - Content Slider Plugin <= 3.8 - SQL Injection Vulnerability
CVE-2025-59586
WordPress Penci Portfolio Plugin <= 3.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-59584
WordPress Penci Podcast Plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-59588
WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability
CVE-2025-59587
WordPress Penci Shortcodes & Performance Plugin < 6.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-59585
WordPress Penci Recipe Plugin <= 4.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-59583
WordPress Penci Filter Everything Plugin < 1.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-59001
WordPress Salient Core plugin <= 3.0.8 - Broken Access Control vulnerability