← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1056 vulnerability records and advisories credit this contributor.
CVE-2025-49424
WordPress Support Ticket Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49420
WordPress Ultra Portfolio - WordPress Plugin <= 6.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49401
WordPress smart SEO Plugin <= 4.0 - Privilege Escalation Vulnerability
CVE-2025-49076
WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49066
WordPress Accordion Slider PRO plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49074
WordPress WidgetKit plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49055
WordPress WP Lead Capturing Pages plugin <= 2.5 - SQL Injection vulnerability
CVE-2025-49045
WordPress Super Interactive Maps plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49049
WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerability
CVE-2025-49050
WordPress WP Lead Capturing Pages plugin <= 2.5 - SQL Injection vulnerability