← All credits
Nguyen Kim Sang (HPT Vietnam) | Patchstack Bug Bounty Program
14 vulnerability records and advisories credit this contributor.
CVE-2026-42636
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28136
WordPress WP SMS plugin <= 6.9.12 - SQL Injection vulnerability
CVE-2025-68561
WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection vulnerability
CVE-2025-53256
WordPress YaySMTP plugin <= 2.6.6 - SQL Injection Vulnerability
CVE-2025-52829
WordPress DirectIQ Email Marketing plugin <= 2.0 - SQL Injection Vulnerability
CVE-2025-52820
WordPress WooCommerce Point Of Sale (POS) <= 1.4 - SQL Injection Vulnerability
CVE-2025-52819
WordPress Pakke Envíos plugin <= 1.0.2 - SQL Injection Vulnerability
CVE-2025-52773
WordPress HieCOR Payment Gateway plugin plugin <= 1.5.11 - SQL Injection vulnerability
CVE-2025-52710
WordPress File Manager Pro plugin <= 1.8.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49452
WordPress PostaPanduri plugin <= 2.1.3 - SQL Injection Vulnerability