← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2024-54325
WordPress CarDealerPress plugin <= 6.6.2410.02 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-54324
WordPress SMSify plugin <= 6.0.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-54322
WordPress Media Downloader plugin <= 0.4.7.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-54310
WordPress Gou Manage My Account Menu plugin <= 1.0.1.8 - Broken Access Control vulnerability
CVE-2024-54309
WordPress PostBox plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
CVE-2024-54288
WordPress LDD Directory Lite plugin <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-54282
WordPress WP Mega Menu plugin <= 1.4.2 - PHP Object Injection vulnerability
CVE-2024-54271
WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability
CVE-2024-54248
WordPress Eewee Admin Custom plugin <= 1.8.2.4 - CSRF to Privilege Escalation vulnerability
CVE-2024-54239
WordPress Eyewear prescription form plugin <= 4.0.18 - Arbitrary Option Update to Privilege Escalation vulnerability