← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2024-49619
WordPress Social Link Groups plugin <= 1.1.0 - SQL Injection vulnerability
CVE-2024-49318
WordPress My Reading Library plugin <= 1.0 - PHP Object Injection vulnerability
CVE-2024-49296
WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49298
WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-48030
WordPress Telecash Ricaricaweb plugin <= 2.2 - PHP Object Injection vulnerability
CVE-2024-48026
WordPress Disc Golf Manager plugin <= 1.0.0 - PHP Object Injection vulnerability
CVE-2024-47325
WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.7 - SQL Injection vulnerability
CVE-2024-45458
WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-45457
WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability
CVE-2024-44008
WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability