← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-47639
WordPress Supertext Translation and Proofreading plugin <= 4.26 - CSRF to Stored XSS vulnerability
CVE-2025-47620
WordPress Martins Free Monetized Ad Exchange Network plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-47515
WordPress WP DPE-GES plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47514
WordPress ELI's Related Posts Footer Links and Widget plugin <= 1.2.04.20 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-46543
WordPress Enhanced Paypal Shortcodes plugin <= 0.5a - Cross Site Scripting (XSS) vulnerability
CVE-2025-46542
WordPress Xpert Tab plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46540
WordPress GNA Search Shortcode plugin <= 0.9.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46538
WordPress Inline Text Popup plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46536
WordPress Carousel-of-post-images plugin <= 1.07 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46534
WordPress Image Style Hover plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability