← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-32125
WordPress Silvasoft boekhouden plugin <= 3.0.6 - SQL Injection vulnerability
CVE-2025-32123
WordPress HTML5 Video Player with Playlist & Multiple Skins plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31902
WordPress Social Share And Social Locker Plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31901
WordPress Digihood HTML Sitemap Plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31851
WordPress Beds24 Online Booking plugin <= 2.0.27 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31850
WordPress PDF Generator Addon for Elementor Page Builder plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31805
WordPress Gutena Kit plugin <= 2.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31752
WordPress Bulk Fields Editor plugin <= 1.8.0 - Broken Access Control vulnerability
CVE-2025-31081
WordPress Enable Media Replace plugin <= 4.1.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-30984
WordPress SEO Tools plugin <= 4.0.7 - Reflected Cross Site Scripting (XSS) vulnerability