← All credits
Pham Van Tam | Patchstack Bug Bounty Program
29 vulnerability records and advisories credit this contributor.
CVE-2025-23878
WordPress Post-to-Post Links plugin <= 4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31403
WordPress Booking Calendar and Notification plugin <= 4.0.3 - SQL Injection vulnerability
CVE-2025-31587
WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31591
WordPress Exit Popup Free plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-23992
WordPress Toocheke Companion plugin <= 1.166 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-23996
WordPress AnyRoad plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32254
WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability
CVE-2025-32231
WordPress Bookingor plugin <= 2.0.1 - Broken Access Control vulnerability
CVE-2025-31883
WordPress WebinarPress plugin <= 1.33.28 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31772
WordPress WP Modal Popup with Cookie Integration plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability