← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-49316
WordPress WP2LEADS plugin <= 3.5.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-47620
WordPress Martins Free Monetized Ad Exchange Network plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-46506
WordPress WpZon – Amazon Affiliate Plugin plugin <= 1.3 - CSRF to XSS vulnerability
CVE-2025-46495
WordPress Drop Caps plugin <= 2.1 - CSRF to XSS vulnerability
CVE-2025-46540
WordPress GNA Search Shortcode plugin <= 0.9.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46524
WordPress WP Filter Post Category plugin <= 2.1.4 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-39435
WordPress My Marginalia plugin <= 1.0.6 - CSRF to Stored XSS vulnerability
CVE-2025-39419
WordPress Revision Diet plugin <= 1.0.1 - CSRF to Stored XSS vulnerability
CVE-2025-39422
WordPress WP Social Bookmarking plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39547
WordPress Internal Link Optimiser plugin <= 5.1.3 - CSRF to XSS vulnerability