← All credits
johska | Patchstack Bug Bounty Program
173 vulnerability records and advisories credit this contributor.
CVE-2026-73183
WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability
CVE-2026-32444
WordPress Cwicly plugin <= 1.4.4 - Remote Code Execution (RCE) vulnerability
CVE-2026-65502
WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability
CVE-2026-65573
WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability
CVE-2026-65551
WordPress Breakdance plugin < 2.7 - Broken Access Control vulnerability
CVE-2026-65449
WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27331
WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability
CVE-2026-25444
WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability
CVE-2025-49316
WordPress WP2LEADS plugin <= 3.5.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-47620
WordPress Martins Free Monetized Ad Exchange Network plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability