← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-58838
WordPress Smooth Accordion Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58868
WordPress SimaCookie Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58858
WordPress WPB Image Widget Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53261
WordPress WP YouTube Live plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-23958
WordPress Editor Wysiwyg Background Color plugin <= 1.0 - Broken Access Control vulnerability
CVE-2025-24581
WordPress Instantio plugin <= 3.3.7 - Settings Change vulnerability
CVE-2025-23741
WordPress Notifications Center plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23613
WordPress WP Journal plugin <= 1.1 - Broken Access Control vulnerability
CVE-2025-23439
WordPress TinyMCE Extended Config plugin <= 0.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23740
WordPress Easy School Registration plugin <= 3.9.8 - Reflected Cross Site Scripting (XSS) vulnerability