← All credits
Nguyen Xuan Chien | Patchstack Bug Bounty Program
435 vulnerability records and advisories credit this contributor.
CVE-2025-52792
WordPress WP User Stylesheet Switcher plugin <= v2.2.0 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-49863
WordPress Advanced Sermons plugin <= 3.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48328
WordPress Real Time Validation for Gravity Forms plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
CVE-2025-29003
WordPress The Holiday Calendar plugin <= 1.18.2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47603
WordPress belingoGeo plugin <= 1.12.0 - Arbitrary File Download Vulnerability
CVE-2025-46440
WordPress kStats Reloaded plugin <= 0.7.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-46448
WordPress Document Management System plugin <= 1.24 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46458
WordPress occupancyplan plugin <= 1.0.3.0 - CSRF to SQL Injection vulnerability
CVE-2025-48265
WordPress Year Make Model Search for WooCommerce plugin <= 1.0.11 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
CVE-2025-39375
WordPress Easy Child Theme Creator plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability