← All credits
Nguyen Xuan Chien | Patchstack Bug Bounty Program
435 vulnerability records and advisories credit this contributor.
CVE-2025-48311
WordPress Invisible Optin plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-48359
WordPress ATT YouTube Widget plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-48351
WordPress Kento Splash Screen plugin <= 1.4 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-58202
WordPress Simple Page Access Restriction Plugin <= 1.0.32 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-52788
WordPress CaptionPix <= 1.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49271
WordPress GravityWP - Merge Tags <= 1.4.4 - Local File Inclusion Vulnerability
CVE-2025-49064
WordPress User Language Switch plugin <= 1.6.10 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49037
WordPress Authentication and xmlrpc log writer plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-54671
WordPress oik plugin <= 4.15.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-54675
WordPress YITH WooCommerce Popup Plugin plugin <= 1.48.0 - Cross Site Request Forgery (CSRF) Vulnerability