← All credits
Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) | Patchstack Bug Bounty Program
674 vulnerability records and advisories credit this contributor.
CVE-2025-39488
WordPress MagOne theme <= 8.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32620
WordPress Doppler Forms plugin <= 2.4.6 - Broken Access Control vulnerability
CVE-2025-32607
WordPress WpBookingly plugin <= 1.3.0 - PHP Object Injection vulnerability
CVE-2025-32603
WordPress WP Online Users Stats plugin <= 1.0.0 - SQL Injection vulnerability
CVE-2025-32311
WordPress Pressroom theme <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32308
WordPress Team Builder plugin <= 1.5.7 - Broken Access Control Vulnerability
CVE-2025-32305
WordPress FlatNews theme <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32302
WordPress Winnex theme <= 1.3.2 - Local File Inclusion Vulnerability
CVE-2025-32301
WordPress CountDown Pro WP Plugin <= 2.7 - SQL Injection Vulnerability
CVE-2025-32306
WordPress Radio Player Shoutcast & Icecast theme <= 4.4.6 - SQL Injection Vulnerability