← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
310 vulnerability records and advisories credit this contributor.
CVE-2026-42648
WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability
CVE-2025-53241
WordPress Simplified plugin <= 1.0.11 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-54669
WordPress MapSVG Plugin < 8.7.4 - SQL Injection Vulnerability
CVE-2025-49996
WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.4 - Broken Access Control vulnerability
CVE-2025-39401
WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability
CVE-2025-39454
WordPress Name Directory plugin <= 1.30.0 - Broken Access Control vulnerability
CVE-2025-47635
WordPress WebinarPress plugin <= 1.33.28 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-39377
WordPress Appsero Helper plugin <= 1.3.4 - SQL Injection vulnerability
CVE-2025-39559
WordPress Bring Fraktguiden for WooCommerce plugin <= 1.11.4 - Broken Access Control vulnerability
CVE-2025-32213
WordPress Flo Forms plugin <= 1.0.43 - Broken Access Control vulnerability