← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-53205
WordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50005
WordPress tagDiv Composer plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-50004
WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability
CVE-2025-49935
WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability
CVE-2025-49909
WordPress Penci Bookmark & Follow plugin < 2.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49422
WordPress Support Ticket Plugin <= 1.9 - Privilege Escalation Vulnerability
CVE-2025-49424
WordPress Support Ticket Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49420
WordPress Ultra Portfolio - WordPress Plugin <= 6.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49401
WordPress smart SEO Plugin <= 4.0 - Privilege Escalation Vulnerability
CVE-2025-49076
WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability