← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2025-31014
WordPress Material Dashboard plugin <= 1.4.5 - Local File Inclusion Vulnerability
CVE-2025-30985
WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability
CVE-2025-30972
WordPress Woocommerce Line Notify plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-30895
WordPress WpEvently Plugin <= 4.2.9 - PHP Object Injection vulnerability
CVE-2025-30886
WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability
CVE-2025-30889
WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerability
CVE-2025-30891
WordPress WpTravelly Plugin <= 1.8.7 - Local File Inclusion vulnerability
CVE-2025-30892
WordPress WpTravelly Plugin <= 1.8.7 - PHP Object Injection vulnerability
CVE-2025-30887
WordPress WpEvently Plugin <= 4.2.9 - Broken Access Control vulnerability
CVE-2025-30880
WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability