← All credits
Martino Spagnuolo (r3verii) | Patchstack Bug Bounty Program
100 vulnerability records and advisories credit this contributor.
CVE-2025-49884
WordPress Internal Linking of Related Contents plugin <= 1.1.8 - Broken Access Control Vulnerability
CVE-2025-49315
WordPress Persian Woocommerce SMS plugin <= 7.0.10 - SQL Injection Vulnerability
CVE-2025-48278
WordPress RSVPMarker plugin <= 11.5.6 - SQL Injection Vulnerability
CVE-2025-48166
WordPress Stop and Block bots plugin Anti bots <= 1.48 - Broken Access Control Vulnerability
CVE-2025-48165
WordPress DELUCKS SEO Plugin <= 2.6.0 - Privilege Escalation Vulnerability
CVE-2025-48158
WordPress BuddyPress XProfile Custom Image Field Plugin <= 3.0.1 - Arbitrary File Deletion Vulnerability
CVE-2025-48157
WordPress Formality <= 1.5.9 - Local File Inclusion Vulnerability
CVE-2025-48155
WordPress Residential Address Detection plugin <= 2.5.9 - Broken Access Control Vulnerability
CVE-2025-48130
WordPress Spice Blocks plugin <= 2.0.7.4 - Arbitrary File Download vulnerability
CVE-2025-48116
WordPress EventON plugin <= 2.4.4 - Broken Access Control Vulnerability