← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2025-46508
WordPress Advanced lazy load plugin <= 1.6.0 - CSRF to Stored XSS vulnerability
CVE-2025-46512
WordPress Custom Functions Plugin plugin <= 1.1 - CSRF to Stored XSS vulnerability
CVE-2025-46510
WordPress Contact Form 7 Calendar plugin <= 3.0.1 - CSRF to Stored XSS vulnerability
CVE-2025-46516
WordPress Twitter Card Generator plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-46504
WordPress Vasaio QR Code plugin <= 1.2.5 - CSRF to XSS vulnerability
CVE-2025-46509
WordPress 360 View plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46502
WordPress LSD Custom taxonomy and category meta plugin <= 1.3.2 - CSRF to XSS vulnerability
CVE-2025-46505
WordPress Peekaboo plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46514
WordPress Milat jQuery Automatic Popup plugin <= 1.3.1 - CSRF to Stored XSS vulnerability
CVE-2025-46501
WordPress Mixcloud Embed plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability