← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2026-39621
WordPress SpicePress theme <= 2.3.2.5 - CSRF to Arbitrary Plugin Installation vulnerability
CVE-2026-39620
WordPress Appointment theme <= 3.5.5 - Cross Site Request Forgery (CSRF) to Arbitrary File Upload vulnerability
CVE-2026-39619
WordPress Busiprof theme <= 2.5.2 - Cross Site Request Forgery (CSRF) to Arbitrary File Upload vulnerability
CVE-2026-39618
WordPress NewsExo theme <= 7.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-39617
WordPress Bluestreet theme <= 1.7.3 - Cross Site Request Forgery (CSRF) to Arbitrary Plugin Installation vulnerability
CVE-2026-39586
WordPress RepairBuddy plugin <= 4.1132 - Sensitive Data Exposure vulnerability
CVE-2026-39572
WordPress Bus Ticket Booking with Seat Reservation plugin < 5.6.5 - Sensitive Data Exposure vulnerability
CVE-2026-39506
WordPress AI Engine (Pro) plugin < 3.4.2 - Broken Access Control vulnerability
CVE-2026-39488
WordPress SureCart plugin <= 4.0.2 - Broken Access Control vulnerability
CVE-2026-39485
WordPress Youtube Embed Plus plugin <= 14.2.4 - Broken Access Control vulnerability