← All credits

Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program

310 vulnerability records and advisories credit this contributor.

WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability

WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability

WordPress PowerPress Podcasting plugin <= 11.12.6 - Server Side Request Forgery (SSRF) Vulnerability

WordPress PowerPress Podcasting plugin <= 11.12.5 - Cross Site Scripting (XSS) Vulnerability

WordPress Office Locator plugin <= 1.3.0 - SQL Injection vulnerability

WordPress Hive Support plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability

WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability

WordPress WP Genealogy plugin <= 0.1.9 - Broken Access Control vulnerability

WordPress Variable Inspector plugin <= 2.6.3 - Broken Access Control vulnerability