← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1056 vulnerability records and advisories credit this contributor.
CVE-2025-49043
WordPress Magic Responsive Slider and Carousel WordPress plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49046
WordPress xPromoter plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-48297
WordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48170
WordPress Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48168
WordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48163
WordPress SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48162
WordPress Simple Business Directory Pro <= 15.5.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48094
WordPress Magic Slider plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-47666
WordPress Image&Video FullScreen Background plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-47600
WordPress WoodMart theme <= 8.3.7 - Arbitrary Shortcode Execution vulnerability