💥 Time to wrap up this year and kick-off the new year with a bang! We’re wrapping up the year with our End of Year Holiday Extravaganza, High-Risk Bonus Blitz Challenge, and Superhero Challenge for the Wordfence Bug Bounty Program.

Through January 6th, 2025, our program has an expanded scope for all researchers with a new lower active install count threshold, automatic bonuses for in-scope submissions, an extra bonus for those focusing on high-risk vulnerabilities, a minimum bounty for all submissions, increased pending report limits, and our rewards remain as high as $31,200.

Review what's in scope for your tier and updated bounties with bonuses here!

Wordfence Intelligence > Vulnerability Researchers > Mika

Mika

All Time Ranking

416

All Time Discoveries

90 Day Published Submissions

11 Dec '24

Last Published Submission

2 Achievements

Learn more about Achievements

Learn more Learn more about Achievements

Showing 61-80 of 416 Vulnerabilities

WPHelpful <= 1.2.4 - Reflected Cross-Site Scripting

6.1

CVE-2024-51761

Nov 4, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Team Showcase and Slider – Team Members Builder <= 1.3 - Reflected Cross-Site Scripting

6.1

CVE-2024-51763

Nov 4, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

PropertyShift <= 1.0.0 - Reflected Cross-Site Scripting

6.1

CVE-2024-51762

Nov 4, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Loginplus <= 1.2 - Unauthenticated Stored Cross-Site Scripting

6.1

CVE-2024-51782

Nov 4, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Dashing Memberships <= 1.1 - Reflected Cross-Site Scripting

6.1

CVE-2024-51760

Nov 4, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

DS.DownloadList <= 1.3 - Unauthenticated PHP Object Injection

8.1

CVE-2024-50507

Oct 28, 2024

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

GRÜN spendino Spendenformular <= 1.0.1 - Unauthenticated Arbitrary Options Update

9.8

CVE-2024-50476

Oct 25, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Signup Page <= 1.0 - Unauthenticated Arbitrary Options Update

9.8

CVE-2024-50475

Oct 25, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ScottCart <= 1.1 - Unauthenticated Remote Code Execution

9.8

CVE-2024-50492

Oct 25, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

PegaPoll <= 1.0.2 - Unauthenticated Arbitrary Options Update

9.8

CVE-2024-50490

Oct 25, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Namaste! LMS <= 2.6.3 - Authenticated (Subscriber+) PHP Object Injection

8.8

CVE-2024-50408

Oct 24, 2024

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Campus Explorer Widget <= 1.4 - Reflected Cross-Site Scripting

6.1

CVE-2024-49660

Oct 21, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

chatplusjp <= 1.02 - Reflected Cross-Site Scripting

6.1

CVE-2024-49664

Oct 21, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Code Generate <= 1.0 - Reflected Cross-Site Scripting

6.1

CVE-2024-49646

Oct 21, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

DocumentPress <= 2.1 - Reflected Cross-Site Scripting

6.1

CVE-2024-49656

Oct 21, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Extra Privacy for Elementor <= 0.1.3 - Reflected Cross-Site Scripting

6.1

CVE-2024-49654

Oct 21, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Whitelist <= 3.5 - Reflected Cross-Site Scripting

6.1

CVE-2024-49643

Oct 21, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Monitor.chat <= 1.1.1 - Reflected Cross-Site Scripting

6.1

CVE-2024-49639

Oct 21, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Risk Warning Bar <= 1.0 - Reflected Cross-Site Scripting

6.1

CVE-2024-49638

Oct 21, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

WooCommerce Maintenance Mode <= 2.0.1 - Reflected Cross-Site Scripting

6.1

CVE-2024-49651

Oct 21, 2024

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Title	CVE ID	CVSS	Vector	Date
WPHelpful <= 1.2.4 - Reflected Cross-Site Scripting	CVE-2024-51761	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 4, 2024
Team Showcase and Slider – Team Members Builder <= 1.3 - Reflected Cross-Site Scripting	CVE-2024-51763	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 4, 2024
PropertyShift <= 1.0.0 - Reflected Cross-Site Scripting	CVE-2024-51762	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 4, 2024
Loginplus <= 1.2 - Unauthenticated Stored Cross-Site Scripting	CVE-2024-51782	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 4, 2024
Dashing Memberships <= 1.1 - Reflected Cross-Site Scripting	CVE-2024-51760	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	November 4, 2024
DS.DownloadList <= 1.3 - Unauthenticated PHP Object Injection	CVE-2024-50507	8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	October 28, 2024
GRÜN spendino Spendenformular <= 1.0.1 - Unauthenticated Arbitrary Options Update	CVE-2024-50476	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	October 25, 2024
Signup Page <= 1.0 - Unauthenticated Arbitrary Options Update	CVE-2024-50475	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	October 25, 2024
ScottCart <= 1.1 - Unauthenticated Remote Code Execution	CVE-2024-50492	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	October 25, 2024
PegaPoll <= 1.0.2 - Unauthenticated Arbitrary Options Update	CVE-2024-50490	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	October 25, 2024
Namaste! LMS <= 2.6.3 - Authenticated (Subscriber+) PHP Object Injection	CVE-2024-50408	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	October 24, 2024
Campus Explorer Widget <= 1.4 - Reflected Cross-Site Scripting	CVE-2024-49660	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 21, 2024
chatplusjp <= 1.02 - Reflected Cross-Site Scripting	CVE-2024-49664	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 21, 2024
Code Generate <= 1.0 - Reflected Cross-Site Scripting	CVE-2024-49646	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 21, 2024
DocumentPress <= 2.1 - Reflected Cross-Site Scripting	CVE-2024-49656	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 21, 2024
Extra Privacy for Elementor <= 0.1.3 - Reflected Cross-Site Scripting	CVE-2024-49654	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 21, 2024
Whitelist <= 3.5 - Reflected Cross-Site Scripting	CVE-2024-49643	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 21, 2024
Monitor.chat <= 1.1.1 - Reflected Cross-Site Scripting	CVE-2024-49639	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 21, 2024
Risk Warning Bar <= 1.0 - Reflected Cross-Site Scripting	CVE-2024-49638	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 21, 2024
WooCommerce Maintenance Mode <= 2.0.1 - Reflected Cross-Site Scripting	CVE-2024-49651	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	October 21, 2024

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation