← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-32396
WordPress Team plugin <= 5.0.13 - Broken Access Control vulnerability
CVE-2026-32403
WordPress Toocheke Companion plugin <= 1.194 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32360
WordPress Rich Showcase for Google Reviews plugin <= 6.9.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32356
WordPress Robo Gallery plugin <= 5.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27072
WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.2.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25386
WordPress Ally plugin <= 4.0.2 - Broken Access Control vulnerability
CVE-2026-25378
WordPress Nelio AB Testing plugin <= 8.2.4 - SQL Injection vulnerability
CVE-2026-25370
WordPress WP Compress plugin <= 6.60.28 - Broken Access Control vulnerability
CVE-2026-25366
WordPress Woody ad snippets plugin <= 2.7.1 - Remote Code Execution (RCE) vulnerability
CVE-2026-25347
WordPress WP REST Cache plugin <= 2026.1.0 - Cross Site Scripting (XSS) vulnerability