← All credits
johska | Patchstack Bug Bounty Program
215 vulnerability records and advisories credit this contributor.
CVE-2025-39548
WordPress Right Click Disable OR Ban plugin <= 1.1.17 - CSRF to Stored XSS vulnerability
CVE-2025-39441
WordPress Dashboard Notepads plugin <= 1.2.1 - CSRF to Stored XSS vulnerability
CVE-2025-39442
WordPress Review Wave – Google Places Reviews plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39431
WordPress Amazon Showcase WordPress Plugin plugin <= 2.2 - CSRF to XSS vulnerability
CVE-2025-39440
WordPress Broken Links Remover plugin <= 1.2.2 - CSRF to Stored XSS vulnerability
CVE-2025-39436
WordPress I Draw <= 1.0 - Arbitrary File Upload Vulnerability
CVE-2025-39433
WordPress Bknewsticker plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39423
WordPress Add to Header plugin <= 1.0 - CSRF to XSS vulnerability
CVE-2025-39432
WordPress bbPress2 shortcode whitelist plugin <= 2.2.1 - CSRF to XSS vulnerability
CVE-2025-39430
WordPress mLanguage plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability