← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2025-49876
WordPress ProfileGrid plugin <= 5.9.5.2 - SQL Injection vulnerability
CVE-2025-49877
WordPress ProfileGrid plugin <= 5.9.5.2 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-49292
WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability
CVE-2025-49291
WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-49033
WordPress ProfileGrid plugin <= 5.9.5.3 - SQL Injection vulnerability
CVE-2025-48120
WordPress MapSVG Lite plugin <= 8.6.9 - Arbitrary Shortcode Execution vulnerability
CVE-2025-48079
WordPress ProfileGrid plugin <= 5.9.5.1 - Broken Access Control Vulnerability
CVE-2025-47693
WordPress Fat Services Booking plugin <= 5.5 - Local File Inclusion vulnerability
CVE-2025-47691
WordPress Ultimate Member plugin <= 2.10.3 - Arbitrary Function Call vulnerability
CVE-2025-47688
WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability