← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-65439
WordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39656
WordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerability
CVE-2026-39645
WordPress GlobalPayments WooCommerce plugin <= 1.18.0 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39643
WordPress Payment Plugins for PayPal WooCommerce plugin <= 2.0.13 - Broken Access Control vulnerability
CVE-2026-39496
WordPress YayMail plugin <= 4.3.3 - SQL Injection vulnerability
CVE-2026-39475
WordPress User Feedback plugin <= 1.10.1 - SQL Injection vulnerability
CVE-2026-39685
WordPress The Moneytizer plugin <= 10.0.10 - Broken Access Control vulnerability
CVE-2026-39673
WordPress iZooto plugin <= 3.7.20 - Broken Access Control vulnerability
CVE-2026-39671
WordPress Extra Fees Plugin for WooCommerce plugin <= 4.3.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-39670
WordPress Visual Link Preview plugin <= 2.3.0 - Server Side Request Forgery (SSRF) vulnerability