← All credits
Martino Spagnuolo (r3verii) | Patchstack Bug Bounty Program
100 vulnerability records and advisories credit this contributor.
CVE-2025-39535
WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability
CVE-2025-32648
WordPress Projectopia plugin <= 5.1.24 - Privilege Escalation vulnerability
CVE-2025-32613
WordPress Debug Log Manager plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32486
WordPress Material Dashboard plugin <= 1.4.6 - Privilege Escalation Vulnerability
CVE-2025-32203
WordPress Falling things Plugin <= 1.08 - SQL Injection vulnerability
CVE-2025-32133
WordPress Secure Copy Content Protection and Content Locking plugin <= 4.5.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31809
WordPress Labinator Content Types Duplicator Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-31524
WordPress WP User Profiles plugin <= 2.6.2 - Privilege Escalation vulnerability
CVE-2025-31094
WordPress WP Posts Carousel plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-31030
WordPress Ray Enterprise Translation plugin <= 1.7.0 - Local File Inclusion via CSRF Vulnerability