← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2025-22778
WordPress Lijit Search Plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22656
WordPress Cookie Monster Plugin <= 1.2.2 - Local File Inclusion vulnerability
CVE-2025-22526
WordPress PHP/MySQL CPU performance statistics Plugin <= 1.2.1 - PHP Object Injection vulnerability
CVE-2025-22309
WordPress SpeakOut! Email Petitions plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22310
WordPress TemplatesNext ToolKit plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22261
WordPress WP FullCalendar plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-56301
WordPress Distance Based Shipping Calculator Plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56290
WordPress Multiple Shipping And Billing Address For Woocommerce Plugin <= 1.2 - Unauthenticated SQL Injection vulnerability
CVE-2024-56291
WordPress PlainInventory – Inventory Management Plugin Plugin <= 3.1.6 - PHP Object Injection vulnerability
CVE-2024-56283
WordPress Locatoraid Store Locator Plugin <= 3.9.50 - PHP Object Injection vulnerability