← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
310 vulnerability records and advisories credit this contributor.
CVE-2024-44052
WordPress HelloAsso plugin <= 1.1.10 - Broken Access Control vulnerability
CVE-2024-50419
WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability
CVE-2025-54026
WordPress GymBase Theme Classes plugin <= 1.4 - SQL Injection Vulnerability
CVE-2025-53254
WordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24622
WordPress Job Board Manager plugin <= 2.1.59 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-23963
WordPress Mark Posts plugin <= 2.2.4 - Broken Access Control vulnerability
CVE-2024-54289
WordPress Awesome Support plugin <= 6.3.1 - Broken Access Control vulnerability
CVE-2024-50459
WordPress AidWP plugin <= 3.2.3 - Broken Access Control vulnerability
CVE-2024-49307
WordPress Admin Management Xtended plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-45212
WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.3 - Broken Access Control vulnerability