← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-39468
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability
CVE-2026-39530
WordPress SpeakOut! Email Petitions plugin <= 4.6.5 - SQL Injection vulnerability
CVE-2026-40732
WordPress Notification for Telegram plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-34898
WordPress Event Tickets Manager for WooCommerce plugin <= 1.5.3 - Broken Access Control vulnerability
CVE-2026-39519
WordPress GeekyBot plugin <= 1.2.0 - SQL Injection vulnerability
CVE-2026-52711
WordPress WooCommerce POS plugin <= 1.8.14 - Broken Access Control vulnerability
CVE-2026-52714
WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.16 - Broken Access Control vulnerability
CVE-2026-42650
WordPress AutomatorWP plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42688
WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability
CVE-2026-49043
WordPress WP Migrate Lite plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability