← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2025-49075
WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability
CVE-2025-48298
WordPress SEOPress for MainWP <= 1.4 - Local File Inclusion Vulnerability
CVE-2025-48282
WordPress Majestic Support plugin <= 1.1.0 - Broken Access Control Vulnerability
CVE-2025-48283
WordPress Majestic Support plugin <= 1.1.0 - SQL Injection Vulnerability
CVE-2025-48272
WordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability
CVE-2025-48274
WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability
CVE-2025-48125
WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability
CVE-2025-48126
WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability
CVE-2025-47690
WordPress Lead Form Data Collection to CRM plugin <= 3.1 - Arbitrary Option Update to Privilege Escalation vulnerability
CVE-2025-47670
WordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability