← All credits
Doan Dinh Van | Patchstack Bug Bounty Program
46 vulnerability records and advisories credit this contributor.
CVE-2026-24617
WordPress Easy Modal plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24572
WordPress Nelio Content plugin <= 4.2.0 - SQL Injection vulnerability
CVE-2026-24563
WordPress LifePress plugin <= 2.2.1 - Broken Access Control vulnerability
CVE-2025-69021
WordPress Popup box plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-69015
WordPress Crowdsignal Forms plugin <= 1.7.2 - Broken Access Control vulnerability
CVE-2025-69012
WordPress Event Organiser plugin <= 3.12.8 - Broken Access Control vulnerability
CVE-2025-68979
WordPress Google Calendar Events plugin <= 3.5.9 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-68603
WordPress Editorial Calendar plugin <= 3.8.8 - Broken Access Control vulnerability
CVE-2025-68606
WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability
CVE-2025-67999
WordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerability