← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-58871
WordPress Master Paper Collapse Toggle Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58876
WordPress Aparat Video Shortcode Plugin <= 0.2.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58831
WordPress Parallax Scrolling Enllax.js Plugin <= 0.0.6 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58869
WordPress SimaCookie Plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-49431
WordPress MF Plus WPML plugin <= 1.1 - Settings Change Vulnerability
CVE-2025-50008
WordPress WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily plugin <= 1.2.4.5 - Broken Access Control Vulnerability
CVE-2025-49880
WordPress CubeWP Forms plugin <= 1.1.5 - Broken Access Control Vulnerability
CVE-2025-32527
WordPress T&P Gallery Slider plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-32279
WordPress Live Forms plugin <= 4.8.5 - Broken Access Control vulnerability
CVE-2025-32256
WordPress SurveyJS plugin <= 1.12.20 - Broken Access Control vulnerability