← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-45216
WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerability
CVE-2026-45209
WordPress MyCryptoCheckout plugin <= 2.161 - Broken Access Control vulnerability
CVE-2026-42383
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability
CVE-2026-57704
WordPress Smart Manager plugin <= 8.90.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65503
WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59543
WordPress Advanced Views plugin <= 3.8.11 - Remote Code Execution (RCE) vulnerability
CVE-2026-57626
WordPress MailPoet plugin 5.30.0-5.33.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57396
WordPress Free Gifts for WooCommerce plugin <= 13.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57383
WordPress JobSearch plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57382
WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability