← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-26905
WordPress Estatik plugin <= 4.3.0 - Local File Inclusion vulnerability
CVE-2025-26907
WordPress Estatik Mortgage Calculator plugin <= 2.0.12 - Local File Inclusion vulnerability
CVE-2025-26874
WordPress MemberSpace plugin <= 2.1.13 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26772
WordPress DethemeKit For Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26751
WordPress Alphabetic Pagination Plugin <= 3.2.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26588
WordPress TTT Crop Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26587
WordPress sidebarTabs Plugin <= 3.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26589
WordPress IE CSS3 Support Plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26586
WordPress Events Planner Plugin <= 1.3.10 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26581
WordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerability