← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2025-30826
WordPress IP Locator plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30824
WordPress Textmetrics plugin <= 3.6.1 - Broken Access Control vulnerability
CVE-2025-30818
WordPress jAlbum Bridge plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30821
WordPress SNORDIAN's H5PxAPIkatchu plugin <= 0.4.14 - Broken Access Control vulnerability
CVE-2025-30817
WordPress Z Companion plugin <= 1.0.13 - Broken Access Control vulnerability
CVE-2025-30810
WordPress Lead Form Data Collection to CRM plugin <= 3.0.1 - SQL Injection vulnerability
CVE-2025-30809
WordPress WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms plugin <= 4.8.4 - Settings Change vulnerability
CVE-2025-30803
WordPress Just Writing Statistics plugin <= 5.3 - Broken Access Control vulnerability
CVE-2025-30797
WordPress Greek Multi Tool – Fix peralinks, accents, auto create menus and more plugin <= 2.3.1 - Broken Access Control Vulnerability
CVE-2025-30775
WordPress WPGuppy plugin <= 1.1.3 - SQL Injection vulnerability