← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2025-39386
WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability
CVE-2025-32691
WordPress PowerPress Podcasting plugin <= 11.12.6 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-32690
WordPress PowerPress Podcasting plugin <= 11.12.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-32665
WordPress Office Locator plugin <= 1.3.0 - SQL Injection vulnerability
CVE-2025-32666
WordPress Hive Support plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32627
WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability
CVE-2025-32626
WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability
CVE-2025-32252
WordPress WP Genealogy plugin <= 0.1.9 - Broken Access Control vulnerability
CVE-2025-32229
WordPress Variable Inspector plugin <= 2.6.3 - Broken Access Control vulnerability
CVE-2025-32235
WordPress MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin <= 5.9.4 - Broken Access Control vulnerability