← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-39492
WordPress WP Maps plugin <= 4.9.1 - SQL Injection vulnerability
CVE-2026-39507
WordPress Social Slider Feed plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-40741
WordPress Redsys for WooCommerce Light plugin <= 7.0.0 - Broken Access Control vulnerability
CVE-2026-40770
WordPress Coupon Affiliates plugin <= 7.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39470
WordPress WooCommerce Cart Abandonment Recovery plugin < 2.1.0 - Privilege Escalation vulnerability
CVE-2026-39525
WordPress Booking Activities plugin <= 1.16.48.1 - Broken Access Control vulnerability
CVE-2026-39540
WordPress Shipment Tracker for Woocommerce plugin <= 1.5.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-40798
WordPress wpForo Forum plugin <= 3.0.4 - SQL Injection vulnerability
CVE-2026-40772
WordPress GeekyBot plugin <= 1.2.2 - Arbitrary File Upload vulnerability
CVE-2026-39491
WordPress JupiterX Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability