← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
310 vulnerability records and advisories credit this contributor.
CVE-2026-48199
WordPress Sermon'e plugin <= 1.0.2 - Broken Access Control vulnerability
CVE-2026-95590
WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability
CVE-2026-32479
WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.17 - SQL Injection vulnerability
CVE-2026-74021
WordPress Chaplin theme <= 2.6.8 - Broken Access Control vulnerability
CVE-2026-74020
WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability
CVE-2026-66430
WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - SQL Injection vulnerability
CVE-2026-66429
WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65448
WordPress Anti Spam and list cleaner – AcyChecker plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59527
WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
CVE-2026-25405
WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability