← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-32513
WordPress Total processing card payments for WooCommerce plugin <= 7.1.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32499
WordPress Logo Showcase Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability
CVE-2025-32198
WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32197
WordPress Piotnet Addons For Elementor plugin <= 2.4.36 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32184
WordPress Ultimate Store Kit Elementor Addons plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32159
WordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerability
CVE-2025-32158
WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerability
CVE-2025-32157
WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Local File Inclusion vulnerability
CVE-2025-32155
WordPress Beds24 Online Booking plugin <= 2.0.28 - Local File Inclusion vulnerability
CVE-2025-32127
WordPress onOffice for WP-Websites plugin <= 5.7 - SQL Injection vulnerability