← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-58966
WordPress NEX-Forms LITE plugin < 8.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-58938
WordPress IDonatePro plugin <= 2.1.9 - Broken Access Control vulnerability
CVE-2025-58922
WordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-58710
WordPress Hotel Listing plugin <= 1.4.0 - Privilege Escalation vulnerability
CVE-2025-57948
WordPress Directory Pro Plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-54717
WordPress WP Membership Plugin <= 1.6.3 - Settings Change Vulnerability
CVE-2025-53577
WordPress Global DNS Plugin <= 3.1.0 - Remote Code Execution (RCE) Vulnerability
CVE-2025-53580
WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability
CVE-2025-53573
WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53424
WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability