João Pedro S Alcântara (Kinorth)
João Pedro S Alcântara (Kinorth) is a security researcher credited with 57 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #111 of 3,823 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 56 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 24 of their findings (42%). Other recurring categories include PHP Remote File Inclusion, Deserialization Of Untrusted Data. The average CVSS score across these disclosures is 7.1, peaking at 8.1. Severity breakdown: 0 critical and 41 high.
The most affected software includes Real Estate 7 WordPress (3), Flatastic - Versatile MultiVendor… (2), Aalto - Architecture and Interior… (1), across 54 distinct plugins, themes and core versions in total.
14 of the 57 disclosed issues have a vendor fix, while 43 remain unpatched. The most severe finding, "Flatastic <= 2.0 - Unauthenticated PHP Object Injection", scores 8.1 out of 10.
#111
of 3,823 researchers
57
54
7.1
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C