← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2025-26917
WordPress WP Templata plugin <= 1.0.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24606
WordPress Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress plugin <=20.8.1 - Broken Access Control vulnerability
CVE-2025-24607
WordPress IdeaPush plugin <= 8.71 - Broken Access Control vulnerability
CVE-2025-22698
WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - Multiple Broken Access Control vulnerability
CVE-2025-69384
WordPress Timeline Event History plugin <= 3.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-62958
WordPress Simple Content Templates for Blog Posts & Pages plugin <= 2.2.61 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-60182
WordPress Support Board plugin < 3.8.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64284
WordPress Majestic Support plugin <= 1.0.7 - Local File Inclusion vulnerability
CVE-2025-64229
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability
CVE-2026-28078
WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability