← All credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
1056 vulnerability records and advisories credit this contributor.
CVE-2025-22536
WordPress WP Music Player Plugin <= 1.3 - SQL Injection vulnerability
CVE-2025-22535
WordPress WPListCal Plugin <= 1.3.5 - SQL Injection vulnerability
CVE-2025-22533
WordPress WOOEXIM Plugin <= 5.0.0 - SQL Injection vulnerability
CVE-2025-22523
WordPress Schedule Plugin <= 1.0.0 - SQL Injection vulnerability
CVE-2025-22521
WordPress wp Hosting Performance Check Plugin <= 2.18.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22514
WordPress Axact Author List Widget Plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22507
WordPress WPMU Prefill Post Plugin <= 1.02 - SQL Injection vulnerability
CVE-2025-22361
WordPress Opentracker Analytics Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22351
WordPress Contact Form 7 Database – CFDB7 plugin <= 1.0.0 - SQL Injection vulnerability
CVE-2025-22355
WordPress Kikx Simple Post Author Filter plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability