← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-39374
WordPress Best Posts Summary plugin <= 1.0 - CSRF to Stored XSS vulnerability
CVE-2025-39371
WordPress Author Box Plugin With Different Description plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32922
WordPress WP2LEADS plugin <= 3.5.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32637
WordPress WP Donate Plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32498
WordPress VKontakte Cross-Post plugin <= 0.3.2 - CSRF to Stored XSS vulnerability
CVE-2025-32497
WordPress Spoiler Block plugin <= 1.7 - CSRF to Stored XSS vulnerability
CVE-2025-32490
WordPress wp secure plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-32484
WordPress WP-Planification – WP-Planning plugin <= 2.3.1 - CSRF to Stored XSS vulnerability
CVE-2025-32482
WordPress Custom Smilies plugin <= 1.2 - CSRF to Stored XSS vulnerability
CVE-2025-32481
WordPress Nino Social Connect plugin <= 2.0 - CSRF to Stored XSS vulnerability