← All credits
johska | Patchstack Bug Bounty Program
215 vulnerability records and advisories credit this contributor.
CVE-2026-25324
WordPress Quiz And Survey Master plugin <= 10.3.4 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-25036
WordPress Passster plugin <= 4.2.25 - Broken Access Control vulnerability
CVE-2026-25025
WordPress VikRestaurants plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24558
WordPress ABG Rich Pins plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24389
WordPress Gallery PhotoBlocks plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-23976
WordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-23807
WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-57902
WordPress RIS Version Switcher – Downgrade or Upgrade WP Versions Easily Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-53338
WordPress re.place plugin <= 0.2.1 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-53329
WordPress Społecznościowa 6 PL 2013 plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) Vulnerability