← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2026-40809
WordPress Metro Magazine theme <= 1.4.1 - Broken Access Control vulnerability
CVE-2026-40771
WordPress Contest Gallery plugin <= 28.1.6 - SQL Injection vulnerability
CVE-2026-40779
WordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerability
CVE-2026-49051
WordPress WP Meta and Date Remover plugin <= 2.3.6 - Broken Access Control vulnerability
CVE-2024-44052
WordPress HelloAsso plugin <= 1.1.10 - Broken Access Control vulnerability
CVE-2024-50419
WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability
CVE-2025-54026
WordPress GymBase Theme Classes plugin <= 1.4 - SQL Injection Vulnerability
CVE-2025-53254
WordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-24622
WordPress Job Board Manager plugin <= 2.1.59 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-23963
WordPress Mark Posts plugin <= 2.2.4 - Broken Access Control vulnerability