← All credits
Martino Spagnuolo (r3verii) | Patchstack Bug Bounty Program
100 vulnerability records and advisories credit this contributor.
CVE-2025-30778
WordPress VForm plugin <= 3.1.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-30774
WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability
CVE-2025-30765
WordPress FlexStock plugin <= 3.13.1 - SQL Injection Vulnerability
CVE-2025-30618
WordPress Rapyd Payment Extension for WooCommerce plugin <= 1.2.0 - PHP Object Injection Vulnerability
CVE-2025-29007
WordPress LMSACE Connect plugin <= 3.4 - Broken Access Control Vulnerability
CVE-2025-26876
WordPress Search with Typesense Plugin <= 2.0.8 - Path Traversal vulnerability
CVE-2025-24767
WordPress TicketBAI Facturas para WooCommerce plugin <= 3.19 - SQL Injection Vulnerability
CVE-2025-24775
WordPress Forms <= 2.9.0 - Arbitrary File Upload Vulnerability
CVE-2025-24759
WordPress WP-BusinessDirectory <= 3.1.5 - SQL Injection vulnerability
CVE-2025-22664
WordPress Survey Maker Plugin <= 5.1.3.5 - Cross Site Scripting (XSS) vulnerability