← All credits
johska | Patchstack Bug Bounty Program
215 vulnerability records and advisories credit this contributor.
CVE-2025-32476
WordPress Advanced Tag Lists plugin <= 1.2 - CSRF to Stored XSS vulnerability
CVE-2025-32477
WordPress WP-Easy Menu plugin <= 0.41 - CSRF to Stored XSS vulnerability
CVE-2025-31462
WordPress CGM Event Calendar plugin <= 0.8.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-31455
WordPress Limit Max IPs Per User plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31442
WordPress Search engine keywords highlighter plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31441
WordPress WordPress Galleria plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31436
WordPress Blubrry PowerPress Podcasting plugin MultiSite add-on plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31443
WordPress KK I Like It plugin <= 1.7.5.3 - CSRF to Stored XSS vulnerability
CVE-2025-31431
WordPress WP Bookmarks plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31401
WordPress MMX – Make Me Christmas plugin <= 1.0.0 - CSRF to Stored XSS vulnerability