← All credits
Nguyen Xuan Chien | Patchstack Bug Bounty Program
435 vulnerability records and advisories credit this contributor.
CVE-2025-58202
WordPress Simple Page Access Restriction Plugin <= 1.0.32 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-52788
WordPress CaptionPix <= 1.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49271
WordPress GravityWP - Merge Tags <= 1.4.4 - Local File Inclusion Vulnerability
CVE-2025-49064
WordPress User Language Switch plugin <= 1.6.10 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49037
WordPress Authentication and xmlrpc log writer plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-54671
WordPress oik plugin <= 4.15.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-54675
WordPress YITH WooCommerce Popup Plugin plugin <= 1.48.0 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-48345
WordPress Contact Form 7 Editor Button plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-28968
WordPress WP Wall plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-52809
WordPress National Weather Service Alerts plugin <= 1.3.5 - Local File Inclusion Vulnerability