← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2025-30831
WordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerability
CVE-2025-30820
WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability
CVE-2025-30814
WordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerability
CVE-2025-30807
WordPress Next-Cart Store to WooCommerce Migration plugin <= 3.9.4 - SQL Injection vulnerability
CVE-2025-30784
WordPress WP Subscription Forms plugin <= 1.2.3 - SQL Injection Vulnerability
CVE-2025-30785
WordPress Subscribe to Download Lite plugin <= 1.2.9 - Local File Inclusion Vulnerability
CVE-2025-30782
WordPress Subscribe to Download Lite plugin <= 1.2.9 - Local File Inclusion vulnerability
CVE-2025-30772
WordPress WPC Smart Upsell Funnel for WooCommerce plugin <= 3.0.4 - Arbitrary Option Update to Privilege Escalation vulnerability
CVE-2025-30582
WordPress DyaPress ERP/CRM plugin <= 18.0.2.0 - Local File Inclusion Vulnerability
CVE-2025-28916
WordPress Docpro plugin <= 2.0.1 - Local File Inclusion vulnerability