← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2026-25327
WordPress Five Star Restaurant Reservations plugin <= 2.7.9 - Broken Access Control vulnerability
CVE-2026-25456
WordPress Automated FedEx live/manual rates with shipping labels plugin <= 5.1.9 - Broken Access Control vulnerability
CVE-2026-25453
WordPress Advanced iFrame plugin <= 2025.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25397
WordPress File Uploader for WooCommerce plugin <= 1.0.4 - Path Traversal vulnerability
CVE-2026-25383
WordPress KiviCare plugin <= 3.6.16 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25361
WordPress WpEvently plugin <= 5.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25341
WordPress RSFirewall! plugin <= 1.1.45 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25330
WordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerability
CVE-2026-25324
WordPress Quiz And Survey Master plugin <= 10.3.4 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-25036
WordPress Passster plugin <= 4.2.25 - Broken Access Control vulnerability