← All credits
Nguyen Ngoc Quang Bach (maysbachs) | Patchstack Bug Bounty Program
28 vulnerability records and advisories credit this contributor.
CVE-2025-49378
WordPress Hydra Booking plugin <= 1.1.10 - SQL Injection vulnerability
CVE-2025-49323
WordPress Hydra Booking plugin <= 1.1.10 - SQL Injection Vulnerability
CVE-2025-49321
WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48256
WordPress Import Social Events plugin <= 1.8.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46523
WordPress COVID-19 (Coronavirus) Update Your Customers plugin <= 1.5.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46473
WordPress Social Counter plugin <= 2.0.5 - PHP Object Injection Vulnerability
CVE-2025-46248
WordPress Frontend Dashboard plugin <= 2.2.5 - SQL Injection Vulnerability
CVE-2025-28989
WordPress Read More Login plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability