← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-32590
WordPress Web2application Plugin <= 6.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32586
WordPress ABA PayWay Payment Gateway for WooCommerce Plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32579
WordPress Sync Posts Plugin <= 1.0 - Arbitrary File Upload vulnerability
CVE-2025-32551
WordPress Connector to CiviCRM with CiviMcRestFace plugin <= 1.0.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32558
WordPress Duplicate Title Checker Plugin <= 1.2 - SQL Injection vulnerability
CVE-2025-32540
WordPress Feedify – Web Push Notifications plugin <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32541
WordPress WooCommerce Sales MIS Report Plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32529
WordPress iONE360 configurator plugin <= 2.0.57 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32534
WordPress Workbox Video from Vimeo & Youtube Plugin Plugin <= 3.2.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32523
WordPress WooCommerce – Payphone Gateway plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability