← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2025-52759
WordPress Accordion FAQ plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-48972
WordPress SeedProd Pro plugin < 6.19.5 - Local File Inclusion vulnerability
CVE-2025-14361
WordPress Woocommerce Envato Affiliates plugin <= 1.2.1 - Settings Change vulnerability
CVE-2026-39655
WordPress Mayosis Core plugin <= 5.4.7 - Broken Access Control vulnerability
CVE-2026-39661
WordPress SW Core plugin <= 1.7.18 - Local File Inclusion vulnerability
CVE-2026-39642
WordPress Nyla theme <= 1.7 - Arbitrary Shortcode Execution vulnerability
CVE-2025-68065
WordPress Hub Core plugin < 6.0.2 - Local File Inclusion vulnerability
CVE-2026-25442
WordPress Kentha theme <= 4.7.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23858
WordPress Custom Users Order Plugin <= 4.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24619
WordPress WP Log Action Plugin <= 0.51 - Reflected Cross Site Scripting (XSS) vulnerability