← All credits
johska | Patchstack Bug Bounty Program
215 vulnerability records and advisories credit this contributor.
CVE-2025-46514
WordPress Milat jQuery Automatic Popup plugin <= 1.3.1 - CSRF to Stored XSS vulnerability
CVE-2025-46501
WordPress Mixcloud Embed plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46497
WordPress Navegg Analytics plugin <= 3.3.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-46496
WordPress Mini twitter feed plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46487
WordPress EC Authorize.net plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-46492
WordPress Call Now PHT Blog plugin <= 2.4.1 - CSRF to XSS vulnerability
CVE-2025-46499
WordPress PayPal Express Checkout plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-46483
WordPress Peadig’s Google +1 Button plugin <= 0.1.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46491
WordPress Multi-Column Taxonomy List plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46479
WordPress BBCode Deluxe plugin <= 2020.08.01.2 - Cross Site Scripting (XSS) Vulnerability