← All credits
Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) | Patchstack Bug Bounty Program
696 vulnerability records and advisories credit this contributor.
CVE-2025-58641
WordPress Exit Intent Popup Plugin <= 1.0.1 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-31425
WordPress WP Lead Capturing Pages plugin < 2.6 - Arbitrary Content Deletion vulnerability
CVE-2025-52730
WordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin <= 4.0.24 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-31055
WordPress Electrician - Electrical Service WordPress theme <= 1.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-52816
WordPress Zita theme <= 1.6.5 - Local File Inclusion Vulnerability
CVE-2025-52727
WordPress CSS3 Vertical Web Pricing Tables plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-31917
WordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31424
WordPress WP Lead Capturing Pages plugin < 2.6 - SQL Injection vulnerability
CVE-2025-31925
WordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49246
WordPress Testimonials Showcase plugin <= 1.9.16 - Broken Access Control Vulnerability