← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-31462
WordPress CGM Event Calendar plugin <= 0.8.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-31455
WordPress Limit Max IPs Per User plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31442
WordPress Search engine keywords highlighter plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31441
WordPress WordPress Galleria plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31436
WordPress Blubrry PowerPress Podcasting plugin MultiSite add-on plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31443
WordPress KK I Like It plugin <= 1.7.5.3 - CSRF to Stored XSS vulnerability
CVE-2025-31431
WordPress WP Bookmarks plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31401
WordPress MMX – Make Me Christmas plugin <= 1.0.0 - CSRF to Stored XSS vulnerability
CVE-2025-31400
WordPress WS Audio Player plugin <= 1.1.8 - CSRF to Stored XSS vulnerability
CVE-2025-31404
WordPress AF Tell a Friend plugin <= 1.4 - CSRF to Stored XSS vulnerability