← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2026-25422
WordPress Popularis Extra plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-25418
WordPress Bit Form plugin <= 2.21.10 - SQL Injection vulnerability
CVE-2026-25388
WordPress Ads Pro plugin <= 5.0 - Broken Access Control vulnerability
CVE-2026-25374
WordPress Spa and Salon theme <= 1.3.2 - Broken Access Control vulnerability
CVE-2026-25348
WordPress Download Alt Text AI plugin <= 1.10.15 - Broken Access Control vulnerability
CVE-2026-25337
WordPress Coachify theme <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-25333
WordPress Shopwell theme <= 1.0.11 - Broken Access Control vulnerability
CVE-2026-25336
WordPress Coachify theme <= 1.1.5 - Broken Access Control vulnerability
CVE-2026-25024
WordPress ThirstyAffiliates plugin <= 3.11.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-24549
WordPress GeoDirectory plugin <= 2.8.149 - Cross Site Request Forgery (CSRF) vulnerability