← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2024-49664
WordPress chatplusjp plugin <= 1.02 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49660
WordPress Campus Explorer Widget plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-50475
WordPress Signup Page plugin <= 1.0 - Arbitrary Option Update to Privilege Escalation vulnerability
CVE-2024-50490
WordPress PegaPoll plugin <= 1.0.2 - Arbitrary Option Update to Privilege Escalation vulnerability
CVE-2025-24596
WordPress WooCommerce Product Table Lite plugin <= 3.8.7 - Broken Access Control vulnerability
CVE-2025-23773
WordPress Delete All Posts plugin <= 1.1.1 - Broken Access Control vulnerability
CVE-2025-58255
WordPress Custom Post Type Images Plugin <= 0.5 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58830
WordPress Parallax Scrolling Enllax.js Plugin <= 0.0.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58837
WordPress SS Font Awesome Icon Plugin <= 4.1.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58872
WordPress Simple Price Calculator Plugin <= 1.3 - Broken Access Control Vulnerability