← All credits
Mika | Patchstack Bug Bounty Program
403 vulnerability records and advisories credit this contributor.
CVE-2025-23756
WordPress LawPress plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23752
WordPress CGD Arrange Terms plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24582
WordPress 12 Step Meeting List plugin <= 3.16.5 - Sensitive Data Exposure vulnerability
CVE-2025-24625
WordPress Taxonomy/Term and Role based Discounts for WooCommerce plugin <= 5.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
CVE-2025-24604
WordPress VForm plugin <= 3.0.5 - Broken Access Control vulnerability
CVE-2025-24588
WordPress Patreon WordPress plugin <= 1.9.1 - Broken Access Control vulnerability
CVE-2025-23781
WordPress WM Options Import Export plugin <= 1.0.1 - Sensitive Data Exposure vulnerability
CVE-2025-23764
WordPress Copy Move Posts plugin <= 1.6 - Broken Access Control vulnerability
CVE-2025-23778
WordPress User Sync ActiveCampaign plugin <= 1.3.2 - Broken Access Control vulnerability
CVE-2025-23954
WordPress Salvador – AI Image Generator plugin <= 1.0.11 - Broken Access Control vulnerability