← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-39420
WordPress WP Twitter Button plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39418
WordPress RSS Manager plugin <= 0.06 - CSRF to Stored XSS vulnerability
CVE-2025-39416
WordPress translit it! plugin <= 1.6 - CSRF to Stored XSS vulnerability
CVE-2025-39424
WordPress Simple Maps plugin <= 0.98 - CSRF to XSS vulnerability
CVE-2025-39415
WordPress Social Media Links plugin <= 1.0.3 - CSRF to Stored XSS vulnerability
CVE-2025-39414
WordPress spam-stopper plugin <= 3.1.3 - CSRF to Stored XSS vulnerability
CVE-2025-39371
WordPress Author Box Plugin With Different Description plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39374
WordPress Best Posts Summary plugin <= 1.0 - CSRF to Stored XSS vulnerability
CVE-2025-32922
WordPress WP2LEADS plugin <= 3.5.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32637
WordPress WP Donate Plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability