← All credits
Joshua Chan | Patchstack Bug Bounty Program
46 vulnerability records and advisories credit this contributor.
CVE-2025-32238
WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability
CVE-2025-24742
WordPress WP Google Maps plugin <= 9.0.40 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24556
WordPress MooWoodle plugin <= 3.2.4 - Sensitive Data Exposure vulnerability
CVE-2025-23438
WordPress WP PT-Viewer plugin <= 2.0.2 - Reflected XSS vulnerability
CVE-2025-23436
WordPress Wp-Scribd-List plugin <= 1.2 - CSRF to XSS vulnerability
CVE-2025-22647
WordPress AIO Performance Profiler plugin <= 1.2 - Broken Access Control vulnerability
CVE-2025-22295
WordPress Tripetto plugin <= 8.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-54421
WordPress Floating Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability
CVE-2024-54279
WordPress WP-NERD Toolkit plugin <= 1.1 - Sensitive Data Exposure vulnerability
CVE-2024-54262
WordPress Import Export For WooCommerce plugin <= 1.6.2 - Arbitrary File Upload vulnerability