← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-46471
WordPress WP Custom Post Popup plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46461
WordPress RRSSB plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46457
WordPress Wp Custom CMS Block plugin <= 2.1 - CSRF to Stored XSS vulnerability
CVE-2025-46445
WordPress External Markdown plugin <= 0.0.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46438
WordPress GTDB Guitar Tuners plugin <= 4.2.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46449
WordPress WoWHead Tooltips plugin <= 2.0.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-43840
WordPress CheckBot plugin <= 1.05 - CSRF to Stored XSS vulnerability
CVE-2025-43841
WordPress WP Vegas plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-39548
WordPress Right Click Disable OR Ban plugin <= 1.1.17 - CSRF to Stored XSS vulnerability
CVE-2025-39441
WordPress Dashboard Notepads plugin <= 1.2.1 - CSRF to Stored XSS vulnerability