← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2025-68011
WordPress GLS Shipping for WooCommerce plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68010
WordPress Netgsm plugin <= 2.9.63 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32657
WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability
CVE-2025-52736
WordPress Finale Lite Plugin <= 2.20.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-62074
WordPress WPMobile.App plugin <= 11.71 - Cross Site Scripting (XSS) vulnerability
CVE-2025-60189
WordPress PoloPag – Pix Automático para Woocommerce plugin <= 2.0.9 - Local File Inclusion vulnerability
CVE-2025-60073
WordPress Responsive Sidebar plugin <= 1.2.2 - Local File Inclusion vulnerability
CVE-2025-68563
WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion vulnerability
CVE-2025-64234
WordPress Evergreen Content Poster plugin <= 1.4.5 - Broken Access Control vulnerability
CVE-2025-60227
WordPress WP Pipes plugin <= 1.4.3 - Arbitrary File Deletion vulnerability