← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2026-24536
WordPress Webpushr plugin <= 4.38.0 - Sensitive Data Exposure vulnerability
CVE-2025-68998
WordPress Heateor Social Login plugin <= 1.1.39 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67473
WordPress CWW Companion plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-60118
WordPress PGS Core Plugin <= 5.9.0 - SQL Injection Vulnerability
CVE-2025-60117
WordPress Vehica Core Plugin <= 1.0.100 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-60111
WordPress Javo Core Plugin <= 3.0.0.266 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-60068
WordPress Javo Core plugin <= 3.0.0.266 - Arbitrary Code Execution vulnerability
CVE-2025-58914
WordPress Di Themes Demo Site Importer plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Plugin Activation vulnerability
CVE-2025-58711
WordPress Blog Designer PRO plugin <= 3.4.8 - Broken Access Control vulnerability
CVE-2025-57990
WordPress Blog Designer Plugin <= 3.1.8 - Broken Access Control Vulnerability