← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2024-51606
WordPress Blrt WP Embed plugin <= 1.6.9 - SQL Injection vulnerability
CVE-2024-51621
WordPress Download-Mirror-Counter plugin <= 1.1 - SQL Injection vulnerability
CVE-2024-51626
WordPress Woocommerce Quote Calculator plugin <= 1.1 - SQL Injection vulnerability
CVE-2024-50416
WordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerability
CVE-2024-48028
WordPress IP Loc8 plugin <= 1.1 - PHP Object Injection vulnerability
CVE-2024-49218
WordPress Recently plugin <= 1.1 - PHP Object Injection vulnerability
CVE-2024-48033
WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerability
CVE-2024-47393
WordPress Quill Forms plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-48332
WordPress Gutenberg Blocks <= 3.3.1 - Local File Inclusion Vulnerability
CVE-2025-49414
WordPress FW Gallery plugin <= 8.0.0 - Arbitrary File Upload Vulnerability