← All credits
Joshua Chan | Patchstack Bug Bounty Program
46 vulnerability records and advisories credit this contributor.
CVE-2025-22295
WordPress Tripetto plugin <= 8.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49235
WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability
CVE-2025-24742
WordPress WP Google Maps plugin <= 9.0.40 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-23436
WordPress Wp-Scribd-List plugin <= 1.2 - CSRF to XSS vulnerability
CVE-2025-22647
WordPress AIO Performance Profiler plugin <= 1.2 - Broken Access Control vulnerability
CVE-2024-54421
WordPress Floating Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability
CVE-2024-54262
WordPress Import Export For WooCommerce plugin <= 1.6.2 - Arbitrary File Upload vulnerability
CVE-2024-53789
WordPress Advanced What should we write next about plugin <=1.0.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-53768
WordPress Content Audit Exporter plugin <= 1.1 - Sensitive Data Exposure vulnerability
CVE-2024-53718
WordPress Multi Feed Reader plugin <= 2.2.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability