← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-23684
WordPress Debug Tool plugin <= 2.2 - Broken Access Control vulnerability
CVE-2025-23615
WordPress Interactive Page Hierarchy plugin <= 1.0.1 - Broken Access Control vulnerability
CVE-2025-23613
WordPress WP Journal plugin <= 1.1 - Broken Access Control vulnerability
CVE-2025-23604
WordPress Rezdy Reloaded plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-23563
WordPress Explore pages plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23562
WordPress XLSXviewer plugin <= 2.1.1 - Arbitrary File Deletion vulnerability
CVE-2025-23561
WordPress MLL Audio Player MP3 Ajax plugin <= 0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-23556
WordPress Push Envoy Notifications plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-23539
WordPress Awesome Hooks plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-23535
WordPress REAL WordPress Sidebar plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability