← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-46512
WordPress Custom Functions Plugin plugin <= 1.1 - CSRF to Stored XSS vulnerability
CVE-2025-46510
WordPress Contact Form 7 Calendar plugin <= 3.0.1 - CSRF to Stored XSS vulnerability
CVE-2025-46509
WordPress 360 View plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46508
WordPress Advanced lazy load plugin <= 1.6.0 - CSRF to Stored XSS vulnerability
CVE-2025-46506
WordPress WpZon – Amazon Affiliate Plugin plugin <= 1.3 - CSRF to XSS vulnerability
CVE-2025-46505
WordPress Peekaboo plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46504
WordPress Vasaio QR Code plugin <= 1.2.5 - CSRF to XSS vulnerability
CVE-2025-46502
WordPress LSD Custom taxonomy and category meta plugin <= 1.3.2 - CSRF to XSS vulnerability
CVE-2025-46501
WordPress Mixcloud Embed plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46499
WordPress PayPal Express Checkout plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability