← All credits
Nguyen Xuan Chien | Patchstack Bug Bounty Program
435 vulnerability records and advisories credit this contributor.
CVE-2025-48309
WordPress BetPress plugin <= 1.0.1 Lite - CSRF to Stored XSS vulnerability
CVE-2025-48307
WordPress SEO For Images plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-48306
WordPress Savyour Affiliate Partner plugin <= 2.1.4 - CSRF to Stored XSS vulnerability
CVE-2025-48304
WordPress Google XML News Sitemap plugin plugin <= 0.02 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-48245
WordPress Quick Contact Form plugin <= 8.2.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-48238
WordPress AWcode Toolkit plugin <= 1.0.18 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-48151
WordPress CM Map Locations <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48146
WordPress SEO Flow by LupsOnline plugin <= 2.2.1 - CSRF to Stored XSS vulnerability
CVE-2025-48143
WordPress Formulario de contacto SalesUp! plugin <= 1.0.14 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-48109
WordPress XM-Backup plugin <= 0.9.1 - CSRF to Stored XSS vulnerability