← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1056 vulnerability records and advisories credit this contributor.
CVE-2025-32198
WordPress Brizy plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32197
WordPress Piotnet Addons For Elementor plugin <= 2.4.36 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32184
WordPress Ultimate Store Kit Elementor Addons plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32159
WordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerability
CVE-2025-32158
WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerability
CVE-2025-32157
WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Local File Inclusion vulnerability
CVE-2025-32155
WordPress Beds24 Online Booking plugin <= 2.0.28 - Local File Inclusion vulnerability
CVE-2025-32127
WordPress onOffice for WP-Websites plugin <= 5.7 - SQL Injection vulnerability
CVE-2025-32125
WordPress Silvasoft boekhouden plugin <= 3.0.6 - SQL Injection vulnerability
CVE-2025-32123
WordPress HTML5 Video Player with Playlist & Multiple Skins plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability