← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-23774
WordPress WPDB to Sql plugin <= 1.2 - Sensitive Data Exposure vulnerability
CVE-2025-23773
WordPress Delete All Posts plugin <= 1.1.1 - Broken Access Control vulnerability
CVE-2025-23771
WordPress Push Notification for Post and BuddyPress plugin <= 2.11 - Settings Change vulnerability
CVE-2025-23766
WordPress OPSI Israel Domestic Shipments plugin <= 2.8.2 - Broken Access Control vulnerability
CVE-2025-23764
WordPress Copy Move Posts plugin <= 1.6 - Broken Access Control vulnerability
CVE-2025-23756
WordPress LawPress plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23754
WordPress The Loops plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23752
WordPress CGD Arrange Terms plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23741
WordPress Notifications Center plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23740
WordPress Easy School Registration plugin <= 3.9.8 - Reflected Cross Site Scripting (XSS) vulnerability