← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1002 vulnerability records and advisories credit this contributor.
CVE-2024-49614
WordPress SermonAudio Widgets plugin <= 1.9.3 - SQL Injection vulnerability
CVE-2024-49612
WordPress SW Contact Form plugin <= 1.0 - SQL Injection vulnerability
CVE-2024-49618
WordPress MyTweetLinks plugin <= 1.1.1 - SQL Injection vulnerability
CVE-2024-49327
WordPress Woostagram Connect plugin <= 1.0.2 - Arbitrary File Upload vulnerability
CVE-2024-49326
WordPress Affiliator plugin <= 2.1.3 - Arbitrary File Upload vulnerability
CVE-2024-49323
WordPress All in One Slider plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-49310
WordPress Themesflat Addons For Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49270
WordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49264
WordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49261
WordPress Arkhe Blocks plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability