← All credits
Martino Spagnuolo (r3verii) | Patchstack Bug Bounty Program
100 vulnerability records and advisories credit this contributor.
CVE-2025-39358
WordPress WP Posts Carousel <= 1.3.12 - PHP Object Injection Vulnerability
CVE-2025-30841
WordPress Countdown & Clock plugin <=2.8.8 - Remote Code Execution (RCE) vulnerability
CVE-2025-49957
WordPress Email Attachment by Order Status & Products Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-60248
WordPress WPC Product Options for WooCommerce plugin <= 3.1.3 - Local File Inclusion vulnerability
CVE-2025-63029
WordPress WCFM Marketplace plugin <= 3.7.1 - SQL Injection vulnerability
CVE-2025-60239
WordPress CoSchool LMS plugin <= 1.4.3 - SQL Injection vulnerability
CVE-2025-54735
WordPress CubeWP Framework Plugin <= 1.1.24 - Privilege Escalation Vulnerability
CVE-2025-54731
WordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability
CVE-2025-53584
WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - PHP Object Injection Vulnerability
CVE-2025-53583
WordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability