← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-24647
WordPress WooCommerce Cloak Affiliate Links plugin <= 1.0.35 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24642
WordPress Setup Default Featured Image plugin <= 1.2 - Broken Access Control vulnerability
CVE-2025-24641
WordPress Better WishList API plugin <= 1.1.3 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-24639
WordPress Korea for WooCommerce plugin <= 1.1.11 - Sensitive Data Exposure vulnerability
CVE-2025-24633
WordPress Build Private Store For Woocommerce plugin <= 1.0 - Broken Access Control vulnerability
CVE-2025-24625
WordPress Taxonomy/Term and Role based Discounts for WooCommerce plugin <= 5.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
CVE-2025-24620
WordPress AIO Shortcodes plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-24613
WordPress FV Thoughtful Comments plugin <= 0.3.5 - Broken Access Control vulnerability
CVE-2025-24604
WordPress VForm plugin <= 3.0.5 - Broken Access Control vulnerability
CVE-2025-24600
WordPress RSVPMaker plugin <= 11.4.5 - Broken Access Control vulnerability