← All credits
ChuongVN | Patchstack Bug Bounty Program
13 vulnerability records and advisories credit this contributor.
CVE-2026-94170
WordPress Sassy Social Share plugin <= 3.3.79 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96671
WordPress Featured Image from URL plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-78267
WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
CVE-2026-24590
WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Broken Access Control vulnerability
CVE-2025-49870
WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability
CVE-2025-49393
WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability
CVE-2025-58998
WordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability
CVE-2025-58972
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.10.4 - Path Traversal vulnerability
CVE-2025-52717
WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability
CVE-2025-49915
WordPress SMS Alert Order Notifications plugin <= 3.8.5 - SQL Injection vulnerability