← All credits
Joshua Chan | Patchstack Bug Bounty Program
46 vulnerability records and advisories credit this contributor.
CVE-2025-32238
WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability
CVE-2025-23438
WordPress WP PT-Viewer plugin <= 2.0.2 - Reflected XSS vulnerability
CVE-2023-48286
WordPress Accept Stripe Payments plugin <= 2.0.79 - Broken Access Control vulnerability
CVE-2024-51637
WordPress Admin SMS Alert plugin <= 1.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-51636
WordPress Plugin Name: GMO Social Connection plugin <= 1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-49683
WordPress Schema & Structured Data for WP & AMP plugin <= 1.3.5 - Sensitive Data Exposure vulnerability
CVE-2024-48048
WordPress Wsify Widget plugin <= 1.0 - CSRF to Stored XSS vulnerability
CVE-2024-2889
WordPress WP-Lister Lite for Amazon plugin <= 2.6.11 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24556
WordPress MooWoodle plugin <= 3.2.4 - Sensitive Data Exposure vulnerability
CVE-2024-54279
WordPress WP-NERD Toolkit plugin <= 1.1 - Sensitive Data Exposure vulnerability