← All credits
Que Thanh Tuan | Patchstack Bug Bounty Program
62 vulnerability records and advisories credit this contributor.
CVE-2025-58832
WordPress Search by Google Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58873
WordPress Pushe Web Push Notification Plugin <= 0.5.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58791
WordPress SEO Auto Linker Plugin <= 1.5.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58203
WordPress Solace Extra Plugin <= 1.3.2 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-58192
WordPress WP Bulk Delete Plugin <= 1.3.6 - Broken Access Control Vulnerability
CVE-2025-58193
WordPress Uncanny Automator Plugin <= 6.7.0.1 - Broken Access Control Vulnerability
CVE-2026-39571
WordPress Instantio plugin <= 3.3.30 - Sensitive Data Exposure vulnerability
CVE-2026-39542
WordPress Doofinder for WooCommerce plugin <= 2.10.13 - Sensitive Data Exposure vulnerability
CVE-2026-39501
WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability
CVE-2026-32541
WordPress Premmerce Redirect Manager plugin <= 1.0.12 - Broken Access Control vulnerability