← All credits
Nguyen Ba Khanh - HPT Vietnam Corporation | Patchstack Bug Bounty Program
18 vulnerability records and advisories credit this contributor.
CVE-2026-57322
WordPress weMail plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-90986
WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.21 - Cross Site Scripting (XSS) vulnerability
CVE-2026-81791
WordPress EventON plugin <= 2.5.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-81795
WordPress Page Visits Counter – Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-84836
WordPress WC Ukraine Shipping plugin <= 1.22.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-81291
WordPress Uncode theme <= 2.12.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-81778
WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66589
WordPress B2BKing plugin <= 5.2.30 - Broken Access Control vulnerability
CVE-2026-66590
WordPress Tagembed plugin <= 7.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-68564
WordPress NotificationX Pro plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability