← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2024-29134
WordPress Tourfic plugin <= 2.11.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-29136
WordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability
CVE-2025-22285
WordPress Pallet Packaging for WooCommerce Plugin <= 1.1.15 - Broken Access Control vulnerability
CVE-2025-48261
WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability
CVE-2025-47646
WordPress PSW Front-end Login & Registration plugin <= 1.13 - Broken Authentication Vulnerability
CVE-2024-49227
WordPress Free Stock Photos Foter plugin <= 1.5.4 - PHP Object Injection vulnerability
CVE-2024-49226
WordPress TAKETIN To WP Membership plugin <= 2.8.17 - PHP Object Injection vulnerability
CVE-2024-43354
WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability
CVE-2024-29135
WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability
CVE-2025-49992
WordPress LearnPress Export Import plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability