← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2025-23945
WordPress Popliup Plugin <= 1.1.1 - Local File Inclusion vulnerability
CVE-2025-23938
WordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerability
CVE-2025-23937
WordPress LinkedIn Lite Plugin <= 1.0 - Local File Inclusion vulnerability
CVE-2025-22799
WordPress Neon Product Designer Plugin <= 2.2.0 - SQL Injection vulnerability
CVE-2025-22796
WordPress WP-Asambleas Plugin <= 2.85.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22795
WordPress Multilang Contact Form Plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22785
WordPress Course Booking System plugin <= 6.0.6 - SQL Injection vulnerability
CVE-2025-22778
WordPress Lijit Search Plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22716
WordPress Taskbuilder Plugin <= 3.0.6 - SQL Injection vulnerability
CVE-2025-22656
WordPress Cookie Monster Plugin <= 1.2.2 - Local File Inclusion vulnerability