← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-31395
WordPress Easy Custom CSS plugin <= 1.0 - CSRF to Stored XSS vulnerability
CVE-2025-31394
WordPress More Mime Type Filters plugin <= 0.3 - CSRF to Stored XSS vulnerability
CVE-2025-31391
WordPress Script Compressor plugin <= 1.7.1 - CSRF to Stored XSS vulnerability
CVE-2025-31390
WordPress Social Crowd plugin <= 0.9.6.1 - CSRF to Stored XSS vulnerability
CVE-2025-31388
WordPress The World plugin <= 0.4 - CSRF to Stored XSS vulnerability
CVE-2025-31385
WordPress Site Table of Contents plugin <= 0.3 - CSRF to Stored XSS vulnerability
CVE-2025-31383
WordPress FrescoChat Live Chat plugin <= 3.2.6 - CSRF to Stored XSS vulnerability
CVE-2025-31382
WordPress Language Field plugin <= 0.9 - CSRF to Stored XSS vulnerability
CVE-2025-31379
WordPress Insert HTML Here plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31378
WordPress Oppso Unit Converter plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability