← All credits

LVT-tholv2k | Patchstack Bug Bounty Program

285 vulnerability records and advisories credit this contributor.

WordPress Local Magic plugin <= 2.9.0 - SQL Injection vulnerability

WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability

WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Database Toolset Plugin <= 1.8.4 - Arbitrary File Deletion vulnerability

WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Arbitrary File Deletion vulnerability

WordPress Oxygen MyData for WooCommerce plugin <= 1.0.64 - Arbitrary File Deletion vulnerability

WordPress Flexi – Guest Submit Plugin <= 4.28 - Local File Inclusion vulnerability

WordPress Shop Products Filter Plugin <= 1.2 - Local File Inclusion vulnerability

WordPress Build App Online Plugin <= 1.0.23 - Local File Inclusion vulnerability