← All credits

LVT-tholv2k | Patchstack Bug Bounty Program

285 vulnerability records and advisories credit this contributor.

WordPress Favorites plugin <= 2.3.6 - Local File Inclusion vulnerability

WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability

WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion vulnerability

WordPress GLS Shipping for WooCommerce plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability

WordPress Netgsm plugin <= 2.9.63 - Cross Site Scripting (XSS) vulnerability

WordPress Evergreen Content Poster plugin <= 1.4.5 - Broken Access Control vulnerability

WordPress WPMobile.App plugin <= 11.71 - Cross Site Scripting (XSS) vulnerability

WordPress WP Pipes plugin <= 1.4.3 - Arbitrary File Deletion vulnerability

WordPress WooCommerce Store Toolkit plugin <= 2.4.3 - Local File Inclusion vulnerability

WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability