← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-32497
WordPress Spoiler Block plugin <= 1.7 - CSRF to Stored XSS vulnerability
CVE-2025-32498
WordPress VKontakte Cross-Post plugin <= 0.3.2 - CSRF to Stored XSS vulnerability
CVE-2025-32479
WordPress Flags Widget plugin <= 1.0.7 - CSRF to Stored XSS vulnerability
CVE-2025-32490
WordPress wp secure plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-32480
WordPress Windows Live Writer plugin <= 0.1 - CSRF to Stored XSS vulnerability
CVE-2025-32484
WordPress WP-Planification – WP-Planning plugin <= 2.3.1 - CSRF to Stored XSS vulnerability
CVE-2025-32478
WordPress WP SexyLightBox plugin <= 0.5.3 - CSRF to Stored XSS vulnerability
CVE-2025-32481
WordPress Nino Social Connect plugin <= 2.0 - CSRF to Stored XSS vulnerability
CVE-2025-32476
WordPress Advanced Tag Lists plugin <= 1.2 - CSRF to Stored XSS vulnerability
CVE-2025-32477
WordPress WP-Easy Menu plugin <= 0.41 - CSRF to Stored XSS vulnerability