← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-32499
WordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerability
CVE-2026-32458
WordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability
CVE-2026-32485
WordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability
CVE-2026-32443
WordPress Product Feed PRO for WooCommerce plugin <= 13.5.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-32433
WordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerability
CVE-2026-32432
WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability
CVE-2026-32431
WordPress Astra Bulk Edit plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32412
WordPress Gift Up Gift Cards for WordPress and WooCommerce plugin <= 3.1.7 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-32418
WordPress Meow Gallery plugin <= 5.4.4 - SQL Injection vulnerability
CVE-2026-32422
WordPress WP EasyCart plugin <= 5.8.13 - SQL Injection vulnerability