← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-49780
WordPress Dokan plugin <= 5.0.2 - Privilege Escalation vulnerability
CVE-2026-39502
WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability
CVE-2026-42653
WordPress SliceWP plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42759
WordPress Affiliate Super Assistent plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-45216
WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerability
CVE-2026-45209
WordPress MyCryptoCheckout plugin <= 2.161 - Broken Access Control vulnerability
CVE-2026-42383
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability
CVE-2026-45211
WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerability
CVE-2026-42377
WordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerability
CVE-2026-39685
WordPress The Moneytizer plugin <= 10.0.10 - Broken Access Control vulnerability