← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-31395
WordPress Easy Custom CSS plugin <= 1.0 - CSRF to Stored XSS vulnerability
CVE-2025-31390
WordPress Social Crowd plugin <= 0.9.6.1 - CSRF to Stored XSS vulnerability
CVE-2025-31391
WordPress Script Compressor plugin <= 1.7.1 - CSRF to Stored XSS vulnerability
CVE-2025-32482
WordPress Custom Smilies plugin <= 1.2 - CSRF to Stored XSS vulnerability
CVE-2025-31468
WordPress WP_Identicon plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31447
WordPress NertWorks All in One Social Share Tools plugin <=1.26 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2026-32517
WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-32519
WordPress Bit SMTP plugin <= 1.2.2 - Broken Authentication vulnerability
CVE-2026-32359
WordPress Icon List Block plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25317
WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.9.0 - Broken Access Control vulnerability