← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1056 vulnerability records and advisories credit this contributor.
CVE-2026-32364
WordPress Turbo Manager plugin < 4.0.8 - Local File Inclusion vulnerability
CVE-2025-50001
WordPress tagDiv Composer plugin <= 5.4.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32119
WordPress CardGate Payments for WooCommerce plugin <= 3.2.1 - SQL Injection vulnerability
CVE-2025-23784
WordPress Contact Form 7 Round Robin Lead Distribution Plugin <= 1.2.1 - SQL Injection vulnerability
CVE-2024-49322
WordPress Job Board Manager for WordPress plugin <= 1.0 - Privilege Escalation vulnerability
CVE-2024-49217
WordPress Adding drop down roles in registration plugin <= 1.1 - Privilege Escalation vulnerability
CVE-2025-69391
WordPress Diamond theme <= 2.4.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-69368
WordPress SOHO - Photography WordPress Theme theme <= 3.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69367
WordPress Oyster - Photography WordPress Theme theme <= 4.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69360
WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.11.0 - Cross Site Scripting (XSS) vulnerability