← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2026-42385
WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68524
WordPress Avante theme < 3.0.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-40731
WordPress ChapterOne theme <= 1.7 - Local File Inclusion vulnerability
CVE-2025-69140
WordPress SweetDate Core plugin < 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-49108
WordPress Moderno theme < 1.43 - PHP Object Injection vulnerability
CVE-2026-39537
WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability
CVE-2026-54192
WordPress Popup box plugin <= 6.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-69151
WordPress Grand Car Rental theme <= 3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69177
WordPress Roneous theme <= 2.1.5 - Local File Inclusion vulnerability
CVE-2025-69178
WordPress Truemag theme <= 4.3.14.2 - Local File Inclusion vulnerability