← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2026-25327
WordPress Five Star Restaurant Reservations plugin <= 2.7.9 - Broken Access Control vulnerability
CVE-2026-25324
WordPress Quiz And Survey Master plugin <= 10.3.4 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-25317
WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.9.0 - Broken Access Control vulnerability
CVE-2026-25036
WordPress Passster plugin <= 4.2.25 - Broken Access Control vulnerability
CVE-2026-25025
WordPress VikRestaurants plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24558
WordPress ABG Rich Pins plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24389
WordPress Gallery PhotoBlocks plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-23976
WordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-23807
WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-57902
WordPress RIS Version Switcher – Downgrade or Upgrade WP Versions Easily Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability