← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2025-31920
WordPress WP Guppy plugin <= 4.3.3 - SQL Injection Vulnerability
CVE-2025-31897
WordPress Arrow Custom Feed for Twitter plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31877
WordPress RestroPress plugin <= 3.2.8 - Broken Access Control vulnerability
CVE-2025-31799
WordPress Publitio plugin <= 2.1.8 - Broken Access Control vulnerability
CVE-2025-31800
WordPress Publitio plugin <= 2.2.0 - Arbitrary File Read vulnerability
CVE-2025-31786
WordPress Simple Icons plugin <= 2.8.4 - Broken Access Control vulnerability
CVE-2025-31782
WordPress mb.YTPlayer plugin <= 3.3.8 - Broken Access Control vulnerability
CVE-2025-31767
WordPress Post Custom Templates Lite plugin <= 1.14 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-31762
WordPress Sheet2Site plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31734
WordPress Simple Post Expiration plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability