← All credits
johska | Patchstack Bug Bounty Program
175 vulnerability records and advisories credit this contributor.
CVE-2025-32482
WordPress Custom Smilies plugin <= 1.2 - CSRF to Stored XSS vulnerability
CVE-2025-32481
WordPress Nino Social Connect plugin <= 2.0 - CSRF to Stored XSS vulnerability
CVE-2025-32480
WordPress Windows Live Writer plugin <= 0.1 - CSRF to Stored XSS vulnerability
CVE-2025-32479
WordPress Flags Widget plugin <= 1.0.7 - CSRF to Stored XSS vulnerability
CVE-2025-32478
WordPress WP SexyLightBox plugin <= 0.5.3 - CSRF to Stored XSS vulnerability
CVE-2025-32477
WordPress WP-Easy Menu plugin <= 0.41 - CSRF to Stored XSS vulnerability
CVE-2025-32476
WordPress Advanced Tag Lists plugin <= 1.2 - CSRF to Stored XSS vulnerability
CVE-2025-31468
WordPress WP_Identicon plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31462
WordPress CGM Event Calendar plugin <= 0.8.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-31455
WordPress Limit Max IPs Per User plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability