← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-49066
WordPress Accordion Slider PRO plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49074
WordPress WidgetKit plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49055
WordPress WP Lead Capturing Pages plugin <= 2.5 - SQL Injection vulnerability
CVE-2025-49045
WordPress Super Interactive Maps plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49049
WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerability
CVE-2025-49050
WordPress WP Lead Capturing Pages plugin <= 2.5 - SQL Injection vulnerability
CVE-2025-49043
WordPress Magic Responsive Slider and Carousel WordPress plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49046
WordPress xPromoter plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-48297
WordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48170
WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability