← All credits
Nguyen Xuan Chien | Patchstack Bug Bounty Program
435 vulnerability records and advisories credit this contributor.
CVE-2025-30520
WordPress Breezing Forms plugin <= 1.2.8.11 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-30525
WordPress WP Profitshare plugin <= 1.4.9 - SQL Injection vulnerability
CVE-2025-28986
WordPress Epicwin Plugin plugin <= 1.5 - CSRF to SQL Injection vulnerability
CVE-2025-28981
WordPress WP Mail Options plugin <= 0.2.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-28974
WordPress Free WP Mail SMTP plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-28978
WordPress SB Breadcrumbs plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-28966
WordPress Recent Posts Slider Responsive plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-28964
WordPress Personal Favicon plugin <= 2.0 - CSRF to Stored XSS vulnerability
CVE-2025-28960
WordPress Evangelische Termine plugin <= 3.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-28958
WordPress Bg Orthodox Calendar plugin <= 0.13.10 - CSRF to Stored XSS vulnerability