← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-22521
WordPress wp Hosting Performance Check Plugin <= 2.18.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22514
WordPress Axact Author List Widget Plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22507
WordPress WPMU Prefill Post Plugin <= 1.02 - SQL Injection vulnerability
CVE-2025-22361
WordPress Opentracker Analytics Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22351
WordPress Contact Form 7 Database – CFDB7 plugin <= 1.0.0 - SQL Injection vulnerability
CVE-2025-22355
WordPress Kikx Simple Post Author Filter plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22357
WordPress Target Notifications plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22356
WordPress Stencies plugin <= 0.58 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22348
WordPress DynamicTags plugin <= 1.4.0 - SQL Injection vulnerability
CVE-2025-22332
WordPress CloudFlare(R) Cache Purge plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability