João Pedro S Alcântara (Kinorth)

Say thanks

22,799.65

XP

1,212

Reports

0

Reports, last 90 days

#10

19 Oct, 2026
🇧🇷
Lvl 12
4
4
5
2
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
Kalles<= 1.1.7.1
PHP Object Injection
39.2
9.8
05/02/2026
Backhoe<= 2.0
Local File Inclusion
32.4
8.1
04/02/2026
Ozeum<= 1.3.0
Local File Inclusion
32.4
8.1
31/01/2026
Flipmart<= 2.8
Local File Inclusion
32.4
8.1
31/01/2026
Teoro<= 1.1
Local File Inclusion
16.2
8.1
30/01/2026
Fabius<= 1.0
Local File Inclusion
16.2
8.1
30/01/2026
Kaven<= 1.2
Local File Inclusion
24.3
8.1
30/01/2026
Pin WP<= 7.0
Cross Site Scripting (XSS)
14.2
7.1
06/02/2026
Avala<= 1.1.4
PHP Object Injection
39.2
9.8
05/02/2026
Volos<= 1.2
Local File Inclusion
32.4
8.1
30/01/2026
Cardea<= 2.3
Local File Inclusion
32.4
8.1
30/01/2026
ThemeStek Extras for LabtechCO Theme<= 8.4
Cross Site Scripting (XSS)
14.2
7.1
21/01/2026
Kicker<= 2.2.1
PHP Object Injection
45.08
9.8
19/02/2026
FC United<= 1.1.1
PHP Object Injection
39.2
9.8
19/02/2026
Qwery<= 3.6.1
PHP Object Injection
45.08
9.8
21/02/2026
Anesta<= 1.5.3
PHP Object Injection
45.08
9.8
22/02/2026
Booklovers<= 2.13.0
PHP Object Injection
45.08
9.8
23/02/2026
Drone Media<= 2.2.0
PHP Object Injection
45.08
9.8
23/02/2026
Gutentype<= 2.1.12
PHP Object Injection
45.08
9.8
23/02/2026
Martfury - WooCommerce Marketplace WordPress Theme<= 3.3.9
Cross Site Scripting (XSS)
32.66
7.1
26/04/2026
DukaMarket<= 1.3.0
Local File Inclusion
16.2
8.1
13/01/2026
Uminex<= 1.0.9
Local File Inclusion
16.2
8.1
13/01/2026
Pond<= 2.6.1
Cross Site Scripting (XSS)
14.2
7.1
14/01/2026
Education Center<= 3.6.12
Cross Site Scripting (XSS)
14.2
7.1
16/01/2026
Werkstatt<= 4.8.3
Local File Inclusion
74.52
8.1
25/01/2026
Whistle - Sports Club<= 4.2
Cross Site Scripting (XSS)
14.2
7.1
28/01/2026
Kids Planet<= 2.2.14.2
Cross Site Scripting (XSS)
16.33
7.1
28/01/2026
Boutique<= 2.3.3
Content Injection
13
6.5
11/01/2026
KuteShop<= 4.2.9
Local File Inclusion
32.4
8.1
09/01/2026
KuteShop<= 4.2.9
Cross Site Scripting (XSS)
14.2
7.1
10/01/2026
Boutique<= 2.3.3
Local File Inclusion
32.4
8.1
11/01/2026
Biolife<= 3.2.3
Local File Inclusion
32.4
8.1
11/01/2026
Biolife<= 3.2.3
Cross Site Scripting (XSS)
14.2
7.1
12/01/2026
TechOne<= 3.0.3
Local File Inclusion
24.3
8.1
12/01/2026
TechOne<= 3.0.3
Cross Site Scripting (XSS)
10.65
7.1
12/01/2026
Armania<= 1.4.8
Local File Inclusion
24.3
8.1
12/01/2026
Armania<= 1.4.8
Cross Site Scripting (XSS)
10.65
7.1
12/01/2026
Aalto<= 1.8
Local File Inclusion
32.4
8.1
22/01/2026
CleanSkin<= 1.5.0
PHP Object Injection
29.4
9.8
25/02/2026
WP Rentals<= 3.14.2
Broken Access Control
24.38
5.3
14/10/2025
Gloria Admin Panel<= 1.3
Cross Site Scripting (XSS)
14.2
7.1
06/02/2026
Real 3D FlipBook<= 5.5
Cross Site Scripting (XSS)
14.2
7.1
31/05/2026
WPLMS <= 4.972
Cross Site Scripting (XSS)
28.4
7.1
06/05/2026
WoodMart< 8.3.8
Cross Site Scripting (XSS)
44.85
6.5
10/12/2025
Flatastic<= 2.0
Cross Site Scripting (XSS)
14.2
7.1
09/02/2026
Flatastic<= 2.0
PHP Object Injection
39.2
9.8
09/02/2026
Golo Framework< 1.7.5
Local File Inclusion
32.4
8.1
06/01/2026
Wiso<= 1.3.5
Cross Site Scripting (XSS)
14.2
7.1
15/11/2025
Kalles Addons<= 1.0.6
PHP Object Injection
39.2
9.8
05/02/2026
Resido<= 1.5
Local File Inclusion
32.4
8.1
02/02/2026
Mayosis Core<= 5.4.7
Cross Site Scripting (XSS)
14.2
7.1
16/01/2026
Vavo Core<= 2.3.0
Local File Inclusion
32.4
8.1
14/01/2026
AI ANN<= 1.29.0
PHP Object Injection
45.08
9.8
19/02/2026
Accalia<= 1.5.3
PHP Object Injection
45.08
9.8
25/02/2026
Vino<= 1.9
Local File Inclusion
11.25
7.5
27/01/2026
TheGem< 5.12.1.1
Cross Site Scripting (XSS)
14.63
6.5
23/01/2026
Tonda Core<= 2.1.2
Local File Inclusion
11.25
7.5
20/01/2026
Civi<= 2.2.4
Broken Access Control
10.6
5.3
06/01/2026
Tonda<= 2.5
Local File Inclusion
11.25
7.5
20/01/2026
TheGem Theme Elements (for Elementor)< 5.12.1.1
Local File Inclusion
33.75
7.5
23/01/2026
Struktur Core< 2.7
Local File Inclusion
11.25
7.5
20/01/2026
Struktur< 2.7
Local File Inclusion
11.25
7.5
20/01/2026
SetSail<= 2.1
Local File Inclusion
11.25
7.5
20/01/2026
Nuss<= 1.3.6
Local File Inclusion
11.25
7.5
06/01/2026
Overworld<= 1.5
Local File Inclusion
11.25
7.5
23/01/2026
NewsPlus Shortcodes<= 4.2.0
Local File Inclusion
11.25
7.5
03/01/2026
Leedo<= 3.0.0
Local File Inclusion
11.25
7.5
18/01/2026
Kitchor<= 1.4.3
Local File Inclusion
11.25
7.5
29/01/2026
Golo Framework<= 1.7.3
Local File Inclusion
11.25
7.5
06/01/2026
Flow<= 1.8
Local File Inclusion
11.25
7.5
21/01/2026
Dør<= 2.4.1
Local File Inclusion
11.25
7.5
06/01/2026
Brook<= 2.9.0
Local File Inclusion
11.25
7.5
04/01/2026
Billey<= 2.1.8
Local File Inclusion
11.25
7.5
04/01/2026
Aqua<= 5.1.2
Local File Inclusion
11.25
7.5
30/01/2026
Aalto<= 1.8
Local File Inclusion
11.25
7.5
22/01/2026
WPeMatico RSS Feed Fetcher<= 2.8.17
Cross Site Scripting (XSS)
14.2
7.1
23/05/2026
Werkstatt<= 4.8.3
PHP Object Injection
30.36
8.8
31/10/2025
NativeChurch< 4.9.5
Cross Site Scripting (XSS)
14.2
7.1
05/11/2025
Artale | Wedding Photography WordPress<= 2.2.2
Cross Site Scripting (XSS)
14.2
7.1
07/11/2025
Trendy Travel<= 6.8
Cross Site Scripting (XSS)
14.2
7.1
07/11/2025
SpaLab | Beauty Salon WordPress Theme<= 7.1
Cross Site Scripting (XSS)
14.2
7.1
07/11/2025
LMS< 10.0
Cross Site Scripting (XSS)
14.2
7.1
07/11/2025
Fitness Zone WordPress Theme<= 6.0
Cross Site Scripting (XSS)
14.2
7.1
07/11/2025
Kids Zone - Children WordPress Theme<= 6.9
Cross Site Scripting (XSS)
14.2
7.1
07/11/2025
Kids Life | Children School WordPress<= 5.6
Cross Site Scripting (XSS)
14.2
7.1
07/11/2025
Automotive Car Dealership Business<= 13.3.3
Cross Site Scripting (XSS)
14.2
7.1
20/10/2025
Automotive Listings<= 18.6
Cross Site Scripting (XSS)
14.2
7.1
20/10/2025
TheFox<= 3.9.76
Cross Site Scripting (XSS)
32.66
7.1
17/10/2025
TourMaster Plugin<= 5.4.5
Local File Inclusion
15
7.5
22/10/2025
Pearl - Corporate Business<= 3.4.10
Local File Inclusion
32.4
8.1
31/10/2025
Real Estate 7<= 3.5.9
Cross Site Scripting (XSS)
16.33
7.1
29/04/2026
Woffice< 5.4.33
Broken Access Control
24.38
5.3
13/10/2025
Jobify<= 4.3.2
Cross Site Scripting (XSS)
14.2
7.1
27/04/2026
Link Whisper Free<= 0.9.4
Cross Site Scripting (XSS)
28.4
7.1
08/05/2026
Goya Core< 1.0.9.4
Local File Inclusion
11.25
7.5
31/10/2025
Splash - Sport Club WordPress Theme for Basketball, Football, Hockey<= 4.4.3
Local File Inclusion
11.25
7.5
03/11/2025
Real Estate 7<= 3.5.9
Cross Site Request Forgery (CSRF)
3.74
6.5
30/04/2026
Blog2Social<= 8.9.2
Cross Site Scripting (XSS)
42.6
7.1
21/05/2026
Neve PRO<= 3.1.2
Cross Site Scripting (XSS)
4.88
6.5
26/10/2025
SeedProd Pro< 6.19.5
Cross Site Scripting (XSS)
14.63
6.5
25/10/2025

Report vulnerabilities to earn bounties and rewards!

Read more