← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2024-45457
WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability
CVE-2024-44008
WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43938
WordPress Name Directory plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-43354
WordPress myCred plugin <= 2.7.2 - PHP Object Injection vulnerability
CVE-2024-43353
WordPress myCred plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43318
WordPress E2Pdf – Export To Pdf Tool for WordPress plugin <= 1.25.05 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43306
WordPress WP-Lister Lite for eBay plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43238
WordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43218
WordPress Mediavine Control Panel plugin <= 2.10.4 - Cross Site Scripting (XSS) vulnerability
CVE-2024-37495
WordPress Create by Mediavine plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability