← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2025-27283
WordPress Theme File Duplicator Plugin <= 1.3 - Arbitrary File Download vulnerability
CVE-2025-27282
WordPress Theme File Duplicator Plugin <= 1.3 - Arbitrary File Upload vulnerability
CVE-2025-27270
WordPress Residential Address Detection Plugin <= 2.5.4 - Arbitrary Option Update to Privilege Escalation vulnerability
CVE-2025-27011
WordPress Booking and Rental Manager plugin <= 2.2.8 - Local File Inclusion vulnerability
CVE-2025-27268
WordPress Small Package Quotes – Worldwide Express Edition Plugin <= 5.2.18 - SQL Injection vulnerability
CVE-2025-26959
WordPress Administrator Z <= 2025.03.24 - Privilege Escalation Vulnerability
CVE-2025-26921
WordPress Booking and Rental Manager Plugin <= 2.2.6 - PHP Object Injection vulnerability
CVE-2025-26915
WordPress Wishlist Plugin <= 1.0.41 - SQL Injection vulnerability
CVE-2025-26741
WordPress Email Notifications for Updates <= 1.1.6 - Privilege Escalation Vulnerability
CVE-2025-26576
WordPress WP Simple Slideshow Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability