← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2025-26985
WordPress Majestic Support plugin <= 1.0.6 - Local File Inclusion vulnerability
CVE-2025-26974
WordPress WP Multi Store Locator plugin <= 2.5.1 - SQL Injection vulnerability
CVE-2025-26935
WordPress WP Job Portal plugin <= 2.2.8 - Local File Inclusion vulnerability
CVE-2025-26928
WordPress Order Limit for WooCommerce plugin <= 3.0.2 - Broken Access Control vulnerability
CVE-2025-26914
WordPress Variable Inspector plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26913
WordPress AR for WordPress plugin <= 7.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26911
WordPress System Dashboard plugin <= 2.8.18 - Sensitive Data Exposure vulnerability
CVE-2025-26918
WordPress Small Package Quotes – Unishippers Edition plugin <= 2.4.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-26887
WordPress EZ SQL Reports Shortcode Widget and DB Backup plugin <= 5.21.35 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26882
WordPress Popup Builder plugin <= 1.1.33 - Cross Site Scripting (XSS) vulnerability