← All credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
309 vulnerability records and advisories credit this contributor.
CVE-2024-54289
WordPress Awesome Support plugin <= 6.3.1 - Broken Access Control vulnerability
CVE-2024-50459
WordPress AidWP plugin <= 3.2.3 - Broken Access Control vulnerability
CVE-2024-49307
WordPress Admin Management Xtended plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-45212
WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.3 - Broken Access Control vulnerability
CVE-2026-42648
WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability
CVE-2025-53241
WordPress Simplified plugin <= 1.0.11 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-54669
WordPress MapSVG Plugin < 8.7.4 - SQL Injection Vulnerability
CVE-2025-49996
WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.4 - Broken Access Control vulnerability
CVE-2025-39401
WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability
CVE-2025-39454
WordPress Name Directory plugin <= 1.30.0 - Broken Access Control vulnerability