← All credits
johska | Patchstack Bug Bounty Program
215 vulnerability records and advisories credit this contributor.
CVE-2025-46475
WordPress Able Player plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46467
WordPress RAphicon plugin <= 2.1.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46471
WordPress WP Custom Post Popup plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46461
WordPress RRSSB plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46457
WordPress Wp Custom CMS Block plugin <= 2.1 - CSRF to Stored XSS vulnerability
CVE-2025-46445
WordPress External Markdown plugin <= 0.0.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46438
WordPress GTDB Guitar Tuners plugin <= 4.2.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46449
WordPress WoWHead Tooltips plugin <= 2.0.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-43840
WordPress CheckBot plugin <= 1.05 - CSRF to Stored XSS vulnerability
CVE-2025-43841
WordPress WP Vegas plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability