← All credits
Nguyen Xuan Chien | Patchstack Bug Bounty Program
435 vulnerability records and advisories credit this contributor.
CVE-2025-32266
WordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32264
WordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32247
WordPress AI Content Creator plugin <= 1.2.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32241
WordPress Official CleverReach WooCommerce Integration plugin <= 3.4.6 - CSRF to Settings Change vulnerability
CVE-2025-31888
WordPress WP Multi Store Locator Plugin <= 2.5.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-31859
WordPress Feedbucket – Website Feedback Tool Plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-31865
WordPress CartBoss plugin <= 4.1.2 - Broken Access Control vulnerability
CVE-2025-31841
WordPress FPW Category Thumbnails Plugin <= 1.9.5 - Broken Access Control vulnerability
CVE-2025-31830
WordPress Printus Plugin <= 1.2.6 - Broken Access Control vulnerability
CVE-2025-31828
WordPress Easy!Appointments plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability