← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-39656
WordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerability
CVE-2026-39673
WordPress iZooto plugin <= 3.7.20 - Broken Access Control vulnerability
CVE-2026-39670
WordPress Visual Link Preview plugin <= 2.3.0 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39671
WordPress Extra Fees Plugin for WooCommerce plugin <= 4.3.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-39645
WordPress GlobalPayments WooCommerce plugin <= 1.18.0 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39643
WordPress Payment Plugins for PayPal WooCommerce plugin <= 2.0.13 - Broken Access Control vulnerability
CVE-2026-39496
WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerability
CVE-2026-39475
WordPress User Feedback plugin <= 1.10.1 - SQL Injection vulnerability
CVE-2026-32586
WordPress Booster for WooCommerce plugin < 7.11.3 - Broken Access Control vulnerability
CVE-2026-32565
WordPress Contextual Related Posts plugin < 4.2.2 - Broken Access Control vulnerability