← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2025-31581
WordPress WP Video Playlist plugin <= 1.1.2 - Settings Change vulnerability
CVE-2025-31561
WordPress Ultimate Push Notifications plugin <= 1.2.0 - SQL Injection vulnerability
CVE-2025-31555
WordPress ContentMX Content Publisher plugin <= 1.0.6 - Broken Access Control vulnerability
CVE-2025-31548
WordPress Ultimate Push Notifications plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31541
WordPress TuriTop Booking System plugin <= 1.0.10 - Broken Access Control vulnerability
CVE-2025-31551
WordPress Salesmate Add-On for Gravity Forms plugin <= 2.0.3 - SQL Injection vulnerability
CVE-2025-31536
WordPress CF7 Spreadsheets plugin <= 2.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-31542
WordPress My auctions allegro plugin <= 3.6.20 - SQL Injection vulnerability
CVE-2025-31547
WordPress Uptime Robot Plugin for WordPress plugin <= 2.3 - SQL Injection vulnerability
CVE-2025-31540
WordPress ACME Divi Modules plugin <= 1.3.5 - Broken Access Control vulnerability