← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-39442
WordPress Review Wave – Google Places Reviews plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39431
WordPress Amazon Showcase WordPress Plugin plugin <= 2.2 - CSRF to XSS vulnerability
CVE-2025-39440
WordPress Broken Links Remover plugin <= 1.2.2 - CSRF to Stored XSS vulnerability
CVE-2025-39436
WordPress I Draw <= 1.0 - Arbitrary File Upload Vulnerability
CVE-2025-39433
WordPress Bknewsticker plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39423
WordPress Add to Header plugin <= 1.0 - CSRF to XSS vulnerability
CVE-2025-39432
WordPress bbPress2 shortcode whitelist plugin <= 2.2.1 - CSRF to XSS vulnerability
CVE-2025-39430
WordPress mLanguage plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39417
WordPress Redirect wordpress to welcome or landing page plugin <= 2.0 - CSRF to Stored XSS vulnerability
CVE-2025-39421
WordPress WP Sticky Side Buttons plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability