← All credits

João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program

1056 vulnerability records and advisories credit this contributor.

WordPress Valenti Engine plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0.1.2 - Cross Site Scripting (XSS) vulnerability

WordPress Image&Video FullScreen Background plugin <= 1.6.7 - SQL Injection vulnerability

WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Local File Inclusion vulnerability

WordPress TheGem Demo Import (for WPBakery) plugin <= 5.10.5 - Arbitrary Content Deletion vulnerability

WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability

WordPress Salient theme < 17.4.0 - Broken Access Control vulnerability

WordPress WP Subscription Forms PRO Plugin <= 2.0.5 - Arbitrary Content Deletion Vulnerability

WordPress WP Virtual Assistant Plugin <= 3.0 - Broken Access Control Vulnerability

WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability