← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-30926
WordPress King Addons for Elementor plugin <= 24.12.58 - Broken Access Control Vulnerability
CVE-2025-30925
WordPress The Pack Elementor addons plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30924
WordPress Primer MyData for Woocommerce plugin < 4.2.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-30906
WordPress Plugin Oficial – Getnet para WooCommerce plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-30852
WordPress Oracle Cards Lite plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) Vulnerability
CVE-2025-30794
WordPress Event Tickets plugin <= 5.20.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-27361
WordPress Photo Express for Google plugin <= 0.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-27287
WordPress SS Quiz Plugin <= 2.0.5 - PHP Object Injection vulnerability
CVE-2025-27286
WordPress Saoshyant Slider Plugin <= 3.0 - PHP Object Injection vulnerability
CVE-2025-27005
WordPress HTML5 Video Player plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability