← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-32546
WordPress Restrict Content plugin <= 3.2.22 - Broken Access Control vulnerability
CVE-2026-32538
WordPress SMTP Mailer plugin <= 1.1.24 - Sensitive Data Exposure vulnerability
CVE-2026-32544
WordPress OOPSpam Anti-Spam plugin <= 1.2.62 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32567
WordPress YML for Yandex Market plugin < 5.3.0 - Arbitrary File Deletion vulnerability
CVE-2026-32539
WordPress PublishPress Revisions plugin <= 3.7.23 - SQL Injection vulnerability
CVE-2026-32537
WordPress Visual Portfolio, Photo Gallery & Post Grid plugin <= 3.5.1 - Local File Inclusion vulnerability
CVE-2026-32526
WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32524
WordPress Photo Engine plugin <= 6.4.9 - Arbitrary File Upload vulnerability
CVE-2026-32497
WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerability
CVE-2026-32459
WordPress UpsellWP plugin <= 2.2.4 - SQL Injection vulnerability