LVT-tholv2k | Patchstack Bug Bounty Program

WordPress Majestic Support plugin <= 1.1.0 - Broken Access Control Vulnerability

WordPress WP Job Portal plugin <= 2.3.2 - SQL Injection Vulnerability

WordPress WP Job Portal plugin <= 2.3.2 - Arbitrary File Download Vulnerability

WordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability

WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure Vulnerability

WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability

WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability

WordPress Lead Form Data Collection to CRM plugin <= 3.1 - Arbitrary Option Update to Privilege Escalation vulnerability

WordPress miniOrange Discord Integration plugin <= 2.2.2 - Local File Inclusion Vulnerability

WordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability