← All credits
Trương Hữu Phúc (truonghuuphuc)
48 vulnerability records and advisories credit this contributor.
CVE-2025-22319
WordPress MashShare plugin <= 4.0.47 - Broken Access Control vulnerability
CVE-2024-54285
WordPress SeedProd Pro plugin <= 6.18.10 - Remote Code Execution (RCE) vulnerability
CVE-2024-54283
WordPress SeedProd Pro plugin <= 6.18.10 - SQL Injection vulnerability
CVE-2024-43144
WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability
CVE-2024-13321
AnalyticsWP <= 2.0.0 - Unauthenticated SQL Injection
CVE-2024-13232
WordPress Awesome Import & Export Plugin - Import & Export WordPress Data <= 4.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary SQL Execution/Privilege Escalation
CVE-2024-10092
Download Monitor <= 5.0.12 - Missing Authorization to API Key Manipulation
CVE-2025-7442
WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection
CVE-2024-10786
Simple Local Avatars <= 2.7.11 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing
CVE-2025-5339
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id'