← All credits
Muhammad Yudha - DJ | Patchstack Bug Bounty Program
359 vulnerability records and advisories credit this contributor.
CVE-2025-25085
WordPress WP SimpleWeather plugin <= 0.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-25082
WordPress flexIDX Home Search plugin <= 2.1.2 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-25079
WordPress Simple Select All Text Box plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-25081
WordPress Embed RSS plugin <= 3.1 - Arbitrary Shortcode Execution vulnerability
CVE-2025-25076
WordPress Graceful Email Obfuscation plugin <= 0.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24721
WordPress Easy YouTube Gallery plugin <= 1.0.4 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-24704
WordPress Magic the Gathering Card Tooltips plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22660
WordPress Include Mastodon Feed plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-15636
WordPress YouTube Showcase plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability