← All credits

Martino Spagnuolo (r3verii) | Patchstack Bug Bounty Program

100 vulnerability records and advisories credit this contributor.

WordPress Squeeze plugin <= 1.6 - Full Path Disclosure (FPD) vulnerability

WordPress Squeeze plugin <= 1.6 - Arbitrary File Upload vulnerability

WordPress Torod plugin <= 2.1 - SQL Injection vulnerability

WordPress fluXtore plugin <= 1.6.0 - Broken Access Control vulnerability

WordPress Chartify plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability

WordPress Secure Copy Content Protection and Content Locking plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability

WordPress Ads by WPQuads plugin <= 2.0.87.1 - SQL Injection Vulnerability

WordPress Ads by WPQuads plugin <= 2.0.87.1 - Broken Access Control Vulnerability

WordPress WP Google Review Slider plugin <= 16.0 - CSRF to SQL Injection vulnerability

WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability