← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1056 vulnerability records and advisories credit this contributor.
CVE-2025-53577
WordPress Global DNS Plugin <= 3.1.0 - Remote Code Execution (RCE) Vulnerability
CVE-2025-53580
WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability
CVE-2025-53573
WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53424
WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability
CVE-2025-53205
WordPress Radio Player Shoutcast & Icecast <= 4.4.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50005
WordPress tagDiv Composer plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-50004
WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability
CVE-2025-49935
WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability
CVE-2025-49909
WordPress Penci Bookmark & Follow plugin < 2.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49422
WordPress Support Ticket Plugin <= 1.9 - Privilege Escalation Vulnerability