← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2026-54827
WordPress Real Estate 7 theme <= 3.5.9 - SQL Injection vulnerability
CVE-2026-57617
WordPress SeedProd Pro plugin < 6.19.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68063
WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion vulnerability
CVE-2026-56044
WordPress Blog2Social plugin <= 8.9.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57618
WordPress Neve PRO theme <= 3.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68064
WordPress Goya Core plugin < 1.0.9.4 - Local File Inclusion vulnerability
CVE-2026-57641
WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-56014
WordPress Master Slider plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39590
WordPress Atomlab theme <= 2.4.5 - Local File Inclusion vulnerability
CVE-2026-39559
WordPress Uppercase theme < 1.2.2 - Local File Inclusion vulnerability