← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2026-32519
WordPress Bit SMTP plugin <= 1.2.2 - Broken Authentication vulnerability
CVE-2026-32517
WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-32359
WordPress Icon List Block plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25456
WordPress Automated FedEx live/manual rates with shipping labels plugin <= 5.1.9 - Broken Access Control vulnerability
CVE-2026-25453
WordPress Advanced iFrame plugin <= 2025.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25397
WordPress File Uploader for WooCommerce plugin <= 1.0.4 - Path Traversal vulnerability
CVE-2026-25383
WordPress KiviCare plugin <= 3.6.16 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25361
WordPress WpEvently plugin <= 5.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25341
WordPress RSFirewall! plugin <= 1.1.45 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25330
WordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerability