← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-42688
WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability
CVE-2026-49043
WordPress WP Migrate Lite plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-49780
WordPress Dokan plugin <= 5.0.2 - Privilege Escalation vulnerability
CVE-2026-39502
WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability
CVE-2026-42653
WordPress SliceWP plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42759
WordPress Affiliate Super Assistent plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-45211
WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerability
CVE-2026-42377
WordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerability
CVE-2026-32586
WordPress Booster for WooCommerce plugin < 7.11.3 - Broken Access Control vulnerability
CVE-2026-32565
WordPress Contextual Related Posts plugin < 4.2.2 - Broken Access Control vulnerability