← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-23554
WordPress Off Page SEO plugin <= 3.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23539
WordPress Awesome Hooks plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-23535
WordPress REAL WordPress Sidebar plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-23514
WordPress Loginplus plugin <= 1.2 - Broken Access Control vulnerability
CVE-2025-23532
WordPress MyAnime Widget plugin <= 1.0 - CSRF to Privilege Escalation vulnerability
CVE-2025-23530
WordPress Custom Post Type Lockdown plugin <= 1.11 - CSRF to Privilege Escalation vulnerability
CVE-2025-23527
WordPress WC Wallet plugin <= 2.2.0 - Arbitrary Content Deletion vulnerability
CVE-2025-23529
WordPress Minterpress plugin <= 1.0.5 - Arbitrary Content Deletion vulnerability
CVE-2025-23515
WordPress ts-tree plugin <= 0.1.1 - Arbitrary Content Deletion vulnerability
CVE-2025-23512
WordPress Team 118GROUP Agent plugin <= 1.6.0 - Arbitrary Content Deletion vulnerability