← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-31739
WordPress Minimalistic Event Manager plugin <= 1.1.1 - Broken Access Control vulnerability
CVE-2025-31618
WordPress Connector to CiviCRM with CiviMcRestFace plugin <= 1.0.10 - Broken Access Control vulnerability
CVE-2025-31611
WordPress Auto Post After Image Upload plugin <= 1.6 - Broken Access Control vulnerability
CVE-2025-31612
WordPress CBX Poll plugin <= 2.0.4 - PHP Object Injection vulnerability
CVE-2025-31596
WordPress Chat by Chatwee plugin <= 2.1.3 - Broken Access Control vulnerability
CVE-2025-31580
WordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability
CVE-2025-31376
WordPress NanoSupport plugin <= 0.6.0 - Broken Access Control vulnerability
CVE-2025-30923
WordPress Gift Message for WooCommerce plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-30916
WordPress Residential Address Detection plugin <= 2.5.4 - Broken Access Control vulnerability
CVE-2025-30915
WordPress Small Package Quotes – Worldwide Express Edition plugin <= 5.2.19 - Broken Access Control vulnerability