← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2024-50544
WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability
CVE-2024-50539
WordPress Lodgix.com Vacation Rental Website Builder plugin <= 3.9.73 - SQL Injection vulnerability
CVE-2024-50491
WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability
CVE-2024-50479
WordPress Woocommerce Quote Calculator plugin <= 1.1 - SQL Injection vulnerability
CVE-2024-50416
WordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerability
CVE-2024-49620
WordPress FERMA.ru.net plugin <= 1.3.3 - SQL Injection vulnerability
CVE-2024-49619
WordPress Social Link Groups plugin <= 1.1.0 - SQL Injection vulnerability
CVE-2024-49318
WordPress My Reading Library plugin <= 1.0 - PHP Object Injection vulnerability
CVE-2024-49298
WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49296
WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability