← All credits
thiennv | Patchstack Bug Bounty Program
72 vulnerability records and advisories credit this contributor.
CVE-2025-23634
WordPress Youtube Video Grid plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23555
WordPress Ui Slider Filter By Price plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23516
WordPress Sale with Razorpay plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23482
WordPress azurecurve Floating Featured Image plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22737
WordPress WpTravelly Plugin <= 1.8.5 - Broken Access Control vulnerability
CVE-2025-22629
WordPress iNET Webkit Plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2025-22563
WordPress Pretty Urls Plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-22564
WordPress Pretty Url Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22559
WordPress TubePress.NET Plugin <= 4.0.1 - CSRF to Stored XSS vulnerability
CVE-2025-22553
WordPress Multiple Carousel Plugin <= 2.0 - SQL Injection vulnerability