← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1056 vulnerability records and advisories credit this contributor.
CVE-2026-22484
WordPress Lisfinity Core plugin <= 1.5.0 - SQL Injection vulnerability
CVE-2026-22469
WordPress DeepDigital theme <= 1.0.2 - Arbitrary Shortcode Execution vulnerability
CVE-2026-22467
WordPress DeepDigital theme <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-22465
WordPress BuddyApp theme <= 1.9.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-22442
WordPress Tribe theme <= 1.7.3 - Local File Inclusion vulnerability
CVE-2026-22402
WordPress Triply theme <= 2.4.7 - Local File Inclusion vulnerability
CVE-2026-22401
WordPress Freshio theme <= 2.4.2 - Local File Inclusion vulnerability
CVE-2026-22385
WordPress Wolmart theme <= 1.9.6 - Local File Inclusion vulnerability
CVE-2026-22384
WordPress Applay - Shortcodes plugin <= 3.7 - PHP Object Injection vulnerability
CVE-2026-28083
WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability