← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2025-22722
WordPress Widget Options plugin <= 4.0.8 - Broken Access Control to Notice Dimissal vulnerability
CVE-2025-22721
WordPress ApplyOnline plugin <= 2.6.7.1 - Broken Access Control vulnerability
CVE-2025-22693
WordPress Contest Gallery plugin <= 25.1.0 - SQL Injection vulnerability
CVE-2025-22691
WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability
CVE-2025-22501
WordPress Improve My City plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22284
WordPress LTL Freight Quotes – Unishippers Edition plugin <= 2.5.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22286
WordPress LTL Freight Quotes – Worldwide Express Edition plugin <= 5.0.21 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56255
WordPress AyeCode Connect plugin <= 1.3.8 - Broken Access Control vulnerability
CVE-2024-56257
WordPress Coins MarketCap plugin <= 5.5.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-54382
WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability