← All credits
Le Ngoc Anh | Patchstack Bug Bounty Program
149 vulnerability records and advisories credit this contributor.
CVE-2025-24554
WordPress AWcode Toolkit plugin <= 1.0.14 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24592
WordPress SysBasics Customize My Account for WooCommerce plugin <= 2.8.22 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24564
WordPress Contact Form With Shortcode plugin <= 4.2.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24599
WordPress Newsletters plugin <= 4.9.9.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24593
WordPress Edwiser Bridge plugin <= 3.0.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23942
WordPress WP Load Gallery Plugin <= 2.1.6 - Arbitrary File Upload vulnerability
CVE-2025-23605
WordPress Call To Action Popup plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23606
WordPress Calendi plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-23867
WordPress WordPress File Search Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22505
WordPress NC Wishlist for Woocommerce Plugin <= 1.0.1 - SQL Injection vulnerability