← All credits
johska | Patchstack Bug Bounty Program
175 vulnerability records and advisories credit this contributor.
CVE-2025-28921
WordPress SpatialMatch IDX plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-28903
WordPress Driving Directions plugin <= 1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-28899
WordPress WP Event Ticketing plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-28890
WordPress Lightview Plus plugin <= 3.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-28877
WordPress Key4ce osTicket Bridge plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-28869
WordPress NextGEN Gallery Voting plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-27354
WordPress Simple Email Subscriber plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-27321
WordPress Blightly Explorer plugin <= 2.3.0 - CSRF to Stored XSS vulnerability
CVE-2025-27319
WordPress User List plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-27314
WordPress Kush Micro News Plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability