← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-53261
WordPress WP YouTube Live plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-23958
WordPress Editor Wysiwyg Background Color plugin <= 1.0 - Broken Access Control vulnerability
CVE-2025-24581
WordPress Instantio plugin <= 3.3.7 - Settings Change vulnerability
CVE-2025-23741
WordPress Notifications Center plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23613
WordPress WP Journal plugin <= 1.1 - Broken Access Control vulnerability
CVE-2025-23439
WordPress TinyMCE Extended Config plugin <= 0.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23740
WordPress Easy School Registration plugin <= 3.9.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23556
WordPress Push Envoy Notifications plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24594
WordPress Linet ERP-Woocommerce Integration plugin <= 3.5.7 - CSRF to Broken Access Control vulnerability
CVE-2025-24613
WordPress FV Thoughtful Comments plugin <= 0.3.5 - Broken Access Control vulnerability