← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1056 vulnerability records and advisories credit this contributor.
CVE-2025-62030
WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-60232
WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Object Injection vulnerability
CVE-2025-60224
WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability
CVE-2025-60045
WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability
CVE-2025-64365
WordPress Ohio Extra plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64364
WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability
CVE-2025-64363
WordPress Kleo theme < 5.5.0 - Local File Inclusion vulnerability
CVE-2025-64362
WordPress K Elements plugin < 5.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64361
WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64220
WordPress Rey Core plugin <= 3.1.8 - Cross Site Scripting (XSS) vulnerability