João Pedro S Alcântara

João Pedro S Alcântara is a security researcher credited with 46 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #137 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on PHP Remote File Inclusion, which accounts for 19 of their findings (41%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data. The average CVSS score across these disclosures is 7.4, peaking at 8.1. Severity breakdown: 0 critical and 30 high.

The most affected software includes Armania - Fashion (2), Biolife - Organic Food WordPress Theme… (2), Boutique - Kute Fashion WooCommerce… (2), across 41 distinct plugins, themes and core versions in total.

2 of the 46 disclosed issues have a vendor fix, while 44 remain unpatched. The most severe finding, "Ozeum | Art Gallery and Museum Theme <= 1.3.0 - Unauthenticated Local File Inclusion", scores 8.1 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#137

of 3,823 researchers

Vulns

46

Critical0
High30
Medium16
Low0
Affected Assets

41

5plugins36themes
Avg CVSS

7.4

Average score of vulnerabilities

Researcher Submissions

46 records
2026-10-08 17:39CVE-2026-62074
8.1
High
João Pedro S AlcântaraNo
2026-10-08 17:39CVE-2026-62070
8.1
High
João Pedro S AlcântaraNo
2026-10-08 17:37CVE-2026-62082
6.1
Medium
João Pedro S AlcântaraNo
2026-10-08 06:54CVE-2026-66569
8.1
High
João Pedro S AlcântaraNo
2026-10-08 06:53CVE-2026-78533
8.1
High
João Pedro S AlcântaraNo
2026-10-08 06:53CVE-2026-66567
8.1
High
João Pedro S AlcântaraNo
2026-10-08 06:53CVE-2026-62045
8.1
High
João Pedro S AlcântaraNo
2026-10-08 06:52CVE-2026-66482
8.1
High
João Pedro S AlcântaraNo
2026-10-08 06:52CVE-2026-62046
8.1
High
João Pedro S AlcântaraNo
2026-10-08 06:32CVE-2026-57806
6.1
Medium
João Pedro S AlcântaraNo
Showing 1–10 of 46 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C