← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-23556
WordPress Push Envoy Notifications plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24594
WordPress Linet ERP-Woocommerce Integration plugin <= 3.5.7 - CSRF to Broken Access Control vulnerability
CVE-2025-24613
WordPress FV Thoughtful Comments plugin <= 0.3.5 - Broken Access Control vulnerability
CVE-2025-24580
WordPress 12 Step Meeting List plugin <= 3.16.5 - Arbitrary Content Deletion vulnerability
CVE-2025-24571
WordPress WP Fast Total Search plugin <= 1.78.258 - Broken Access Control vulnerability
CVE-2025-24575
WordPress HelloAsso plugin <= 1.1.11 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24570
WordPress Atarim plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49650
WordPress BuddyPress Greeting Message plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-49656
WordPress DocumentPress plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-49663
WordPress uCAT – Next Story plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability