← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2026-73183
WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability
CVE-2026-32444
WordPress Cwicly plugin <= 1.4.4 - Remote Code Execution (RCE) vulnerability
CVE-2026-65573
WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability
CVE-2026-65551
WordPress Breakdance plugin < 2.7 - Broken Access Control vulnerability
CVE-2026-65502
WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability
CVE-2026-39647
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39509
WordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerability
CVE-2026-27331
WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability
CVE-2026-25444
WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability
CVE-2026-65449
WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability