← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2025-28873
WordPress Shuffle plugin <= 0.5 - SQL Injection vulnerability
CVE-2025-27356
WordPress Sticky Header On Scroll plugin <= 1.0 - Broken Access Control vulnerability
CVE-2025-27348
WordPress WP Social SEO Booster plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-27351
WordPress Local Search SEO Contact Page plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-27310
WordPress Page and Post Lister plugin <= 1.2.1 - Arbitrary Content Deletion vulnerability
CVE-2025-27304
WordPress Contact Form 7 Star Rating with font Awesome plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-27303
WordPress Contact Form 7 Star Rating plugin <= 1.10 - Cross Site Scripting (XSS) vulnerability
CVE-2025-27274
WordPress GPX Viewer plugin <= 2.2.11 - Path Traversal vulnerability
CVE-2025-26995
WordPress Market Exporter plugin <= 2.0.21 - Broken Access Control vulnerability
CVE-2025-26991
WordPress WPPizza plugin <= 3.19.4 - Reflected Cross Site Scripting (XSS) vulnerability