← All credits
Martino Spagnuolo (r3verii) | Patchstack Bug Bounty Program
100 vulnerability records and advisories credit this contributor.
CVE-2025-47511
WordPress Welcart e-Commerce plugin <= 2.11.13 - Arbitrary File Deletion Vulnerability
CVE-2025-46490
WordPress Crossword Compiler Puzzles plugin <= 5.2 - Arbitrary File Upload Vulnerability
CVE-2025-46241
WordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerability
CVE-2025-46242
WordPress Watu Quiz plugin <= 3.4.3 - SQL Injection Vulnerability
CVE-2025-46228
WordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-39566
WordPress Hostel plugin <= 1.1.5.6 - SQL Injection Vulnerability
CVE-2025-39568
WordPress StoreContrl Woocommerce plugin <= 4.1.3 - Arbitrary File Download Vulnerability
CVE-2025-39571
WordPress WowStore plugin <= 4.2.4 - Broken Access Control Vulnerability
CVE-2025-39567
WordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-39569
WordPress Taskbuilder plugin <= 4.0.1 - SQL Injection Vulnerability