← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-40772
WordPress GeekyBot plugin <= 1.2.2 - Arbitrary File Upload vulnerability
CVE-2026-39491
WordPress JupiterX Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39468
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability
CVE-2026-39530
WordPress SpeakOut! Email Petitions plugin <= 4.6.5 - SQL Injection vulnerability
CVE-2026-40732
WordPress Notification for Telegram plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-34898
WordPress Event Tickets Manager for WooCommerce plugin <= 1.5.3 - Broken Access Control vulnerability
CVE-2026-39519
WordPress GeekyBot plugin <= 1.2.0 - SQL Injection vulnerability
CVE-2026-52711
WordPress WooCommerce POS plugin <= 1.8.14 - Broken Access Control vulnerability
CVE-2026-52714
WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.16 - Broken Access Control vulnerability
CVE-2026-42650
WordPress AutomatorWP plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability