← All credits
Nguyen Ba Khanh - HPT Vietnam Corporation | Patchstack Bug Bounty Program
29 vulnerability records and advisories credit this contributor.
CVE-2026-32557
WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability
CVE-2026-105065
WordPress XStore theme < 9.7.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-106609
WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability
CVE-2026-62034
WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96761
WordPress Welcart e-Commerce plugin <= 2.12.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-104409
WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32568
WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability
CVE-2026-32570
WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32571
WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42635
WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability