← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1056 vulnerability records and advisories credit this contributor.
CVE-2025-60150
WordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerability
CVE-2025-60148
WordPress Subscribe to Download plugin <= 2.0.9 - Broken Access Control vulnerability
CVE-2025-60152
WordPress Subscribe To Unlock Plugin <= 1.1.5 - Broken Access Control Vulnerability
CVE-2025-60107
WordPress LambertGroup - AllInOne - Banner with Playlist Plugin <= 3.8 - SQL Injection Vulnerability
CVE-2025-60110
WordPress AllInOne - Banner Rotator Plugin <= 3.8 - SQL Injection Vulnerability
CVE-2025-60108
WordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin <= 3.8 - SQL Injection Vulnerability
CVE-2025-60109
WordPress LambertGroup - AllInOne - Content Slider Plugin <= 3.8 - SQL Injection Vulnerability
CVE-2025-59586
WordPress Penci Portfolio Plugin <= 3.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-59584
WordPress Penci Podcast Plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-59588
WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability