← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-58838
WordPress Smooth Accordion Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58837
WordPress SS Font Awesome Icon Plugin <= 4.1.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-54732
WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-54045
WordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerability
CVE-2025-53569
WordPress Trust Payments Gateway for WooCommerce (JavaScript Library) plugin <= 1.3.6 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-53304
WordPress Contact Form – 7 : Hide Success Message plugin <= 1.1.4 - Broken Access Control Vulnerability
CVE-2025-53293
WordPress Dashboard Widget Sidebar plugin <= 1.2.3 - Broken Access Control Vulnerability
CVE-2025-53261
WordPress WP YouTube Live plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-52802
WordPress Import YouTube videos as WP Posts plugin <= 2.1 - Broken Access Control Vulnerability
CVE-2025-52795
WordPress WP Front User Submit / Front Editor plugin <= 5.0.6 - Cross Site Request Forgery (CSRF) vulnerability