← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-53215
WordPress Yahoo! WebPlayer Plugin <= 2.0.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49453
WordPress BP Profile as Homepage plugin <= 1.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-48233
WordPress Affiliates Manager Google reCAPTCHA Integration plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-48135
WordPress Aptivada for WP plugin <= 2.0.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48114
WordPress ShayanWeb Admin FontChanger plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-47639
WordPress Supertext Translation and Proofreading plugin <= 4.26 - CSRF to Stored XSS vulnerability
CVE-2025-47515
WordPress WP DPE-GES plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47514
WordPress ELI's Related Posts Footer Links and Widget plugin <= 1.2.04.20 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-46542
WordPress Xpert Tab plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46543
WordPress Enhanced Paypal Shortcodes plugin <= 0.5a - Cross Site Scripting (XSS) vulnerability