← All credits
johska | Patchstack Bug Bounty Program
175 vulnerability records and advisories credit this contributor.
CVE-2025-31447
WordPress NertWorks All in One Social Share Tools plugin <=1.26 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-31443
WordPress KK I Like It plugin <= 1.7.5.3 - CSRF to Stored XSS vulnerability
CVE-2025-31442
WordPress Search engine keywords highlighter plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31441
WordPress WordPress Galleria plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31436
WordPress Blubrry PowerPress Podcasting plugin MultiSite add-on plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31431
WordPress WP Bookmarks plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31410
WordPress WP Church Donation plugin <= 1.7 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-31404
WordPress AF Tell a Friend plugin <= 1.4 - CSRF to Stored XSS vulnerability
CVE-2025-31402
WordPress NewsBoard Post and RSS Scroller plugin <= 1.2.12 - CSRF to Stored XSS vulnerability
CVE-2025-31401
WordPress MMX – Make Me Christmas plugin <= 1.0.0 - CSRF to Stored XSS vulnerability