← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2024-52433
WordPress My Geo Posts Free plugin <= 1.2 - PHP Object Injection vulnerability
CVE-2024-52439
WordPress Team Rosters plugin <= 4.8.2 - PHP Object Injection vulnerability
CVE-2024-52429
WordPress WP Quick Setup plugin <= 2.0 - Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability
CVE-2024-52415
WordPress SK WP Settings Backup plugin <= 1.0 - CSRF to PHP Object Injection vulnerability
CVE-2024-52414
WordPress WDES Responsive Mobile Menu plugin <= 5.3.18 - PHP Object Injection vulnerability
CVE-2024-52416
WordPress Debug Tool plugin <= 2.2 - Remote Code Execution vulnerability
CVE-2024-52413
WordPress Airin Blog theme <= 1.6.1 - PHP Object Injection vulnerability
CVE-2024-52395
WordPress Floating Buttons for WooCommerce plugin <= 2.8.8 - Broken Access Control vulnerability
CVE-2024-52383
WordPress Ai Auto Tool Content Writing Assistant plugin <= 2.1.2 - Broken Access Control vulnerability
CVE-2024-52399
WordPress Writer Helper plugin <= 3.1.6 - Arbitrary File Upload vulnerability