← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-59516
WordPress ICS Calendar plugin <= 12.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57797
WordPress EduMall theme <= 4.5.1 - Broken Access Control vulnerability
CVE-2026-57773
WordPress Advanced Shipment Tracking for WooCommerce plugin <= 4.0 - SQL Injection vulnerability
CVE-2026-57668
WordPress NEX-Forms plugin <= 9.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57753
WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.1.5 - Sensitive Data Exposure vulnerability
CVE-2026-57361
WordPress Survey Maker plugin <= 5.2.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57625
WordPress Admin and Site Enhancements (ASE) Pro plugin <= 8.8.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57624
WordPress Blocksy Companion Pro plugin <= 2.1.46 - Remote Code Execution (RCE) vulnerability
CVE-2026-57675
WordPress WP Photo Album Plus plugin <= 9.2.02.004 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57672
WordPress wpDataTables plugin <= 6.5.1.1 - Cross Site Scripting (XSS) vulnerability