← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
310 vulnerability records and advisories credit this contributor.
CVE-2024-51579
WordPress 5 Stars Rating Funnel plugin <=1.4.01 - SQL Injection vulnerability
CVE-2024-49273
WordPress ProfileGrid plugin <= 5.9.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-49293
WordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerability
CVE-2024-47334
WordPress Zoho Flow for WordPress plugin <= 2.7.1 - SQL Injection vulnerability
CVE-2026-39627
WordPress Ashe theme <= 2.266 - Broken Access Control vulnerability
CVE-2026-39619
WordPress Busiprof theme <= 2.5.2 - Cross Site Request Forgery (CSRF) to Arbitrary File Upload vulnerability
CVE-2026-39617
WordPress Bluestreet theme <= 1.7.3 - Cross Site Request Forgery (CSRF) to Arbitrary Plugin Installation vulnerability
CVE-2026-39622
WordPress Education Base theme <= 3.0.8 - Broken Access Control vulnerability
CVE-2026-39621
WordPress SpicePress theme <= 2.3.2.5 - CSRF to Arbitrary Plugin Installation vulnerability
CVE-2026-39618
WordPress NewsExo theme <= 7.1 - Cross Site Request Forgery (CSRF) vulnerability