← All credits
Martino Spagnuolo (r3verii) | Patchstack Bug Bounty Program
100 vulnerability records and advisories credit this contributor.
CVE-2025-54731
WordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability
CVE-2025-53584
WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - PHP Object Injection Vulnerability
CVE-2025-53583
WordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability
CVE-2025-53572
WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability
CVE-2026-28569
WordPress SSL Zen plugin <= 4.7.43 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-53309
WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure Vulnerability
CVE-2025-58835
WordPress Bonus for Woo plugin <= 7.6.6 - Other vulnerability Type vulnerability
CVE-2025-58817
WordPress SoftMe Theme <= 1.1.27 - Broken Access Control Vulnerability
CVE-2025-58824
WordPress Shk Corporate Theme <= 2.4.1.1 - Broken Access Control Vulnerability
CVE-2025-58833
WordPress Invelity MyGLS connect Plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability