← All credits
Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) | Patchstack Bug Bounty Program
696 vulnerability records and advisories credit this contributor.
CVE-2026-66653
WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability
CVE-2026-66657
WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability
CVE-2026-65580
WordPress Agrion theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-65525
WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-57785
WordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57769
WordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-57770
WordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerability
CVE-2025-58902
WordPress Lighthouse theme <= 1.2.12 - Local File Inclusion vulnerability
CVE-2026-42382
WordPress Audrey theme <= 1.5 - Local File Inclusion vulnerability
CVE-2026-27419
WordPress Zegen theme <= 1.1.9 - Arbitrary File Upload vulnerability