← All credits
Nguyen Xuan Chien | Patchstack Bug Bounty Program
435 vulnerability records and advisories credit this contributor.
CVE-2025-47655
WordPress theMarketer plugin <= 1.4.7 - CSRF to Stored XSS vulnerability
CVE-2025-47648
WordPress Pays – WooCommerce Payment Gateway plugin <= 2.6 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-47644
WordPress Integrations of Zoho CRM with Elementor form plugin <= 1.0.8 - Open Redirection Vulnerability
CVE-2025-47610
WordPress WooCommerce Fortnox Integration <= 4.5.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47590
WordPress WPSpeed plugin <= 2.6.5 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-47459
WordPress WP Fundraising Donation and Crowdfunding Platform plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-47456
WordPress WP Gravity Forms Zendesk plugin <= 1.1.2 - Open Redirection Vulnerability
CVE-2025-47453
WordPress WP Smart Import plugin <= 1.1.3 - Local File Inclusion Vulnerability
CVE-2025-47458
WordPress B2i Investor Tools plugin <= 1.0.7.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-47454
WordPress WP Gravity Forms Dynamics CRM plugin <= 1.1.4 - Open Redirection Vulnerability