← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-32520
WordPress WordPress Health and Server Condition plugin <= 4.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32509
WordPress Simple WP Events plugin <= 1.8.17 - Arbitrary File Deletion vulnerability
CVE-2025-32506
WordPress AT Internet SmartTag plugin <= 0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32278
WordPress Table Block by RioVizual plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32258
WordPress Simple Website Logo plugin <= 1.1 - Broken Access Control vulnerability
CVE-2025-32251
WordPress Jetpack Feedback Exporter plugin <= 1.23 - Sensitive Data Exposure Vulnerability
CVE-2025-32260
WordPress DethemeKit For Elementor plugin <= 2.1.10 - Broken Access Control vulnerability
CVE-2025-32244
WordPress SEO Help plugin <= 6.7.9 - Broken Access Control vulnerability
CVE-2025-32243
WordPress Internal Link Optimiser plugin <= 5.1.2 - Settings Change vulnerability
CVE-2025-32237
WordPress MasterStudy LMS plugin <= 3.5.28 - Broken Access Control vulnerability