← All credits
LVT-tholv2k | Patchstack Bug Bounty Program
285 vulnerability records and advisories credit this contributor.
CVE-2024-51626
WordPress Woocommerce Quote Calculator plugin <= 1.1 - SQL Injection vulnerability
CVE-2024-50416
WordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerability
CVE-2024-48028
WordPress IP Loc8 plugin <= 1.1 - PHP Object Injection vulnerability
CVE-2024-49218
WordPress Recently plugin <= 1.1 - PHP Object Injection vulnerability
CVE-2024-48033
WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerability
CVE-2024-47393
WordPress Quill Forms plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-48332
WordPress Gutenberg Blocks <= 3.3.1 - Local File Inclusion Vulnerability
CVE-2025-49414
WordPress FW Gallery plugin <= 8.0.0 - Arbitrary File Upload Vulnerability
CVE-2025-48273
WordPress WP Job Portal plugin <= 2.3.2 - Arbitrary File Download Vulnerability
CVE-2025-47462
WordPress Challan plugin <= 3.7.58 - CSRF to Privilege Escalation vulnerability