← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
310 vulnerability records and advisories credit this contributor.
CVE-2026-39620
WordPress Appointment theme <= 3.5.5 - Cross Site Request Forgery (CSRF) to Arbitrary File Upload vulnerability
CVE-2026-39586
WordPress RepairBuddy plugin <= 4.1132 - Sensitive Data Exposure vulnerability
CVE-2026-39572
WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability
CVE-2026-39506
WordPress AI Engine (Pro) plugin < 3.4.2 - Broken Access Control vulnerability
CVE-2026-39485
WordPress Youtube Embed Plus plugin <= 14.2.4 - Broken Access Control vulnerability
CVE-2026-39477
WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability
CVE-2026-39488
WordPress SureCart plugin <= 4.0.2 - Broken Access Control vulnerability
CVE-2026-39476
WordPress User Feedback plugin <= 1.10.1 - Broken Access Control vulnerability
CVE-2026-39469
WordPress PageLayer plugin <= 2.0.8 - Sensitive Data Exposure vulnerability
CVE-2026-32515
WordPress Miraculous theme < 2.1.2 - Broken Access Control vulnerability