← All credits
Nguyen Ngoc Quang Bach (maysbachs) | Patchstack Bug Bounty Program
28 vulnerability records and advisories credit this contributor.
CVE-2025-53325
WordPress Beauty Contact Popup Form plugin <= 6.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53323
WordPress Pre-Publish Post Checklist plugin <= 3.1 - Broken Access Control Vulnerability
CVE-2025-53301
WordPress Theme Junkie Team Content plugin <= 0.1.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53300
WordPress Podcast Feed Player Widget and Shortcode plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53298
WordPress Plugin Inspector plugin <= 1.5 - Arbitrary File Download Vulnerability
CVE-2025-53296
WordPress EC Stars Rating plugin <= 1.0.11 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50039
WordPress VG WORT METIS plugin <= 2.0.1 - Broken Access Control Vulnerability
CVE-2025-50040
WordPress CF7 Spreadsheets Plugin <= 2.3.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50014
WordPress PDPA Consent for Thailand plugin <= 1.1.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49377
WordPress Hydra Booking plugin <= 1.1.9 - Broken Access Control vulnerability