← All credits
Le Ngoc Anh | Patchstack Bug Bounty Program
149 vulnerability records and advisories credit this contributor.
CVE-2025-24601
WordPress FundPress plugin <= 2.0.6 - PHP Object Injection vulnerability
CVE-2025-24545
WordPress BSK Forms Validation plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23655
WordPress Contact Form 7 – Paystack Add-on plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23653
WordPress Form To Online Booking plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23621
WordPress Causes – Donation plugin <= 1.0.01 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23623
WordPress Contact Form 7 – CCAvenue Add-on plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23616
WordPress Canalplan plugin <= 5.31 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23620
WordPress Captchelfie – Captcha by Selfie plugin <= 1.0.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23619
WordPress Catch Duplicate Switcher plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23622
WordPress CBX Accounting & Bookkeeping plugin <= 1.3.14 - Reflected Cross Site Scripting (XSS) vulnerability