← All credits
Le Ngoc Anh (Patchstack Alliance)
120 vulnerability records and advisories credit this contributor.
CVE-2024-34412
WordPress ParcelPanel plugin <= 3.8.1 - Auth. SQL Injection vulnerability
CVE-2024-33928
WordPress CodeBard's Patron Button and Widgets for Patreon plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-33681
WordPress Regenerate post permalink plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) leading to XSS vulnerability
CVE-2024-32789
WordPress Seers plugin <= 8.0.6 - Cross Site Request Forgery (CSRF) to XSS vulnerability
CVE-2024-32785
WordPress The Pack Elementor addons plugin <= 2.0.8.3 - Cross Site Request Forgery (CSRF) to XSS vulnerability
CVE-2024-32127
WordPress Find Duplicates plugin <= 1.4.6 - Auth. SQL Injection vulnerability
CVE-2024-32129
WordPress Freshdesk (official) plugin <= 2.3.6 - Open Redirection vulnerability
CVE-2024-32098
WordPress Advanced Page Visit Counter plugin <= 8.0.6 - Auth. SQL Injection (SQLi) vulnerability
CVE-2024-32087
WordPress Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More plugin <= 3.5.7 - Auth. SQL Injection (SQLi) vulnerability
CVE-2024-31255
WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability