← All credits
Martino Spagnuolo (r3verii) | Patchstack Bug Bounty Program
100 vulnerability records and advisories credit this contributor.
CVE-2025-48281
WordPress MyStyle Custom Product Designer plugin <= 3.21.1 - SQL Injection Vulnerability
CVE-2025-47619
WordPress 6Storage Rentals plugin <= 2.20.2 - Broken Access Control vulnerability
CVE-2025-46488
WordPress Visual Builder plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2025-46486
WordPress Nomupay Payment Processing Gateway plugin <= 7.1.7 - Arbitrary File Download Vulnerability
CVE-2025-48138
WordPress BERTHA AI plugin <= 1.13 - Broken Access Control Vulnerability
CVE-2025-47445
WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability
CVE-2025-39570
WordPress WPCOM Member plugin <= 1.7.7 - Local File Inclusion Vulnerability
CVE-2026-32353
WordPress MailerPress plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-47682
WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.8.1 - SQL Injection Vulnerability
CVE-2025-32275
WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerability