← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-24580
WordPress 12 Step Meeting List plugin <= 3.16.5 - Arbitrary Content Deletion vulnerability
CVE-2025-24571
WordPress WP Fast Total Search plugin <= 1.78.258 - Broken Access Control vulnerability
CVE-2025-24575
WordPress HelloAsso plugin <= 1.1.11 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24570
WordPress Atarim plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49650
WordPress BuddyPress Greeting Message plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-49656
WordPress DocumentPress plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-49663
WordPress uCAT – Next Story plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-49664
WordPress chatplusjp plugin <= 1.02 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49660
WordPress Campus Explorer Widget plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-50475
WordPress Signup Page plugin <= 1.0 - Arbitrary Option Update to Privilege Escalation vulnerability