← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-23534
WordPress WPLingo plugin <= 1.1.2 - Arbitrary Content Deletion vulnerability
CVE-2025-23532
WordPress MyAnime Widget plugin <= 1.0 - CSRF to Privilege Escalation vulnerability
CVE-2025-23530
WordPress Custom Post Type Lockdown plugin <= 1.11 - CSRF to Privilege Escalation vulnerability
CVE-2025-23529
WordPress Minterpress plugin <= 1.0.5 - Arbitrary Content Deletion vulnerability
CVE-2025-23528
WordPress DD Roles plugin <= 4.1 - Privilege Escalation vulnerability
CVE-2025-23527
WordPress WC Wallet plugin <= 2.2.0 - Arbitrary Content Deletion vulnerability
CVE-2025-23515
WordPress ts-tree plugin <= 0.1.1 - Arbitrary Content Deletion vulnerability
CVE-2025-23514
WordPress Loginplus plugin <= 1.2 - Broken Access Control vulnerability
CVE-2025-23512
WordPress Team 118GROUP Agent plugin <= 1.6.0 - Arbitrary Content Deletion vulnerability
CVE-2025-23486
WordPress Database Sync plugin <= 0.5.1 - Sensitive Data Exposure vulnerability