← All credits
johska | Patchstack Bug Bounty Program
215 vulnerability records and advisories credit this contributor.
CVE-2025-46522
WordPress Tabs plugin <= 4.0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-46518
WordPress IGIT Related Posts With Thumb Image After Posts plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46508
WordPress Advanced lazy load plugin <= 1.6.0 - CSRF to Stored XSS vulnerability
CVE-2025-46512
WordPress Custom Functions Plugin plugin <= 1.1 - CSRF to Stored XSS vulnerability
CVE-2025-46510
WordPress Contact Form 7 Calendar plugin <= 3.0.1 - CSRF to Stored XSS vulnerability
CVE-2025-46516
WordPress Twitter Card Generator plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-46504
WordPress Vasaio QR Code plugin <= 1.2.5 - CSRF to XSS vulnerability
CVE-2025-46509
WordPress 360 View plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46502
WordPress LSD Custom taxonomy and category meta plugin <= 1.3.2 - CSRF to XSS vulnerability
CVE-2025-46505
WordPress Peekaboo plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability