← All credits
Que Thanh Tuan | Patchstack Bug Bounty Program
62 vulnerability records and advisories credit this contributor.
CVE-2026-24940
WordPress Travelfic Toolkit plugin <= 1.3.3 - Broken Access Control vulnerability
CVE-2025-68535
WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability
CVE-2025-68522
WordPress WpStream plugin <= 4.9.5 - Broken Access Control vulnerability
CVE-2025-68521
WordPress WpStream plugin <= 4.9.5 - Broken Access Control vulnerability
CVE-2025-66082
WordPress WpEvently plugin <= 5.0.4 - Broken Access Control vulnerability
CVE-2025-59010
WordPress Permalink Manager Lite Plugin <= 2.5.1.3 - Sensitive Data Exposure Vulnerability
CVE-2025-58810
WordPress Simple Link List Widget Plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58630
WordPress Simple Matomo Tracking Code Plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58226
WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Plugin <= 1.16.16 - Sensitive Data Exposure Vulnerability
CVE-2025-58007
WordPress Social Pug Plugin <= 1.35.2 - Sensitive Data Exposure Vulnerability