← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-54816
WordPress Advanced Ads plugin <= 2.0.21 - Remote Code Execution (RCE) vulnerability
CVE-2026-52716
WordPress WorkScout-Core plugin <= 1.7.11 - Arbitrary File Deletion vulnerability
CVE-2026-52705
WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Arbitrary File Upload vulnerability
CVE-2026-54185
WordPress Cornerstone plugin < 7.8.8 - SQL Injection vulnerability
CVE-2026-42629
WordPress PowerPack Pro for Elementor plugin < v2.13.0 - Broken Authentication vulnerability
CVE-2026-49071
WordPress WooCommerce Dropshipping plugin <= 5.2.4 - Broken Authentication vulnerability
CVE-2026-39597
WordPress WPZOOM Addons for Elementor plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-39596
WordPress Blocksy Companion Pro plugin < 2.1.29 - SQL Injection vulnerability
CVE-2026-40783
WordPress Blocksy Companion Pro plugin <= 2.1.37 - Remote Code Execution (RCE) vulnerability
CVE-2026-54186
WordPress JobSearch plugin <= 3.2.9 - SQL Injection vulnerability