← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-46497
WordPress Navegg Analytics plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-46496
WordPress Mini twitter feed plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46487
WordPress EC Authorize.net plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-46492
WordPress Call Now PHT Blog plugin <= 2.4.1 - CSRF to XSS vulnerability
CVE-2025-46499
WordPress PayPal Express Checkout plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-46483
WordPress Peadig’s Google +1 Button plugin <= 0.1.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46491
WordPress Multi-Column Taxonomy List plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46479
WordPress BBCode Deluxe plugin <= 2020.08.01.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46475
WordPress Able Player plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46467
WordPress RAphicon plugin <= 2.1.2 - Cross Site Scripting (XSS) Vulnerability