← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
310 vulnerability records and advisories credit this contributor.
CVE-2026-24549
WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-24536
WordPress Webpushr plugin <= 4.38.0 - Sensitive Data Exposure vulnerability
CVE-2025-68998
WordPress Heateor Social Login plugin <= 1.1.39 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67473
WordPress CWW Companion plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-60118
WordPress PGS Core Plugin <= 5.9.0 - SQL Injection Vulnerability
CVE-2025-60117
WordPress Vehica Core Plugin <= 1.0.100 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-60111
WordPress Javo Core Plugin <= 3.0.0.266 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-60068
WordPress Javo Core plugin <= 3.0.0.266 - Arbitrary Code Execution vulnerability
CVE-2025-58914
WordPress Di Themes Demo Site Importer plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Plugin Activation vulnerability
CVE-2025-58711
WordPress Blog Designer PRO plugin <= 3.4.8 - Broken Access Control vulnerability