← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-26555
WordPress Debug-Bar-Extender Plugin <= 0.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26554
WordPress WP Discord Post Plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26553
WordPress Pre Order Addon for WooCommerce plugin<= 1.0.7 - Reflected Cross-Site Scripting
CVE-2025-26556
WordPress WP AntiDDOS Plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26544
WordPressUTM tags + Landing page plugin <= 1.4 - CSRF to Stored XSS vulnerability
CVE-2025-25165
WordPress Staff Directory Plugin: Company Directory Plugin <= 4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-25157
WordPress WP Church Center Plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-25134
WordPress Theme Demo Bar Plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-25118
WordPress WPOptin plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24733
WordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerability