← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-22331
WordPress Cf7Save Extension plugin <= 1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22326
WordPress 5centsCDN plugin <= 25.4.15 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22283
WordPress GetSocial Plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22305
WordPress Hero Banner Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability
CVE-2025-22293
WordPress Gutentor plugin <= 3.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-13504
WordPress Real Estate Pro plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-12551
WordPress ListingHub plugin 1.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-7590
WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-56286
WordPress Classic Addons – WPBakery Page Builder plugin <= 3.0 - Local File Inclusion vulnerability
CVE-2024-56282
WordPress WPMozo Addons Lite for Elementor plugin <= 1.1.0 - Local File Inclusion vulnerability