← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1056 vulnerability records and advisories credit this contributor.
CVE-2025-32536
WordPress HTML5 Video Player with Playlist Plugin <= 2.50 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32528
WordPress iCal Feeds Plugin <= 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32524
WordPress MyWorks WooCommerce Sync for QuickBooks Online plugin <= 2.9.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32533
WordPress Deliver via Shipos for WooCommerce Plugin <= 2.1.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32521
WordPress Cool Flipbox plugin <= 1.8.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32507
WordPress Event Espresso plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32504
WordPress Silvasoft boekhouden plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32514
WordPress WooCommerce Estimate and Quote plugin <= 1.0.2.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32513
WordPress Total processing card payments for WooCommerce plugin <= 7.1.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32499
WordPress Logo Showcase Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability