← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-39423
WordPress Add to Header plugin <= 1.0 - CSRF to XSS vulnerability
CVE-2025-39422
WordPress WP Social Bookmarking plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39421
WordPress WP Sticky Side Buttons plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39420
WordPress WP Twitter Button plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39419
WordPress Revision Diet plugin <= 1.0.1 - CSRF to Stored XSS vulnerability
CVE-2025-39418
WordPress RSS Manager plugin <= 0.06 - CSRF to Stored XSS vulnerability
CVE-2025-39417
WordPress Redirect wordpress to welcome or landing page plugin <= 2.0 - CSRF to Stored XSS vulnerability
CVE-2025-39416
WordPress translit it! plugin <= 1.6 - CSRF to Stored XSS vulnerability
CVE-2025-39415
WordPress Social Media Links plugin <= 1.0.3 - CSRF to Stored XSS vulnerability
CVE-2025-39414
WordPress spam-stopper plugin <= 3.1.3 - CSRF to Stored XSS vulnerability