← All credits
Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) | Patchstack Bug Bounty Program
674 vulnerability records and advisories credit this contributor.
CVE-2025-32300
WordPress DZS Video Gallery plugin <= 12.25 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32307
WordPress Chameleon HTML5 Audio Player With/Without Playlist plugin <= 3.5.6 - SQL Injection Vulnerability
CVE-2025-32293
WordPress Finance Consultant theme <= 2.8 - PHP Object Injection Vulnerability
CVE-2025-32294
WordPress Oxpitan theme <= 1.3.5 - Local File Inclusion Vulnerability
CVE-2025-32292
WordPress Jarvis – Night Club, Concert, Festival WordPress theme <= 1.8.11 - PHP Object Injection Vulnerability
CVE-2025-32290
WordPress Sticky HTML5 Music Player plugin <= 3.1.6 - SQL Injection Vulnerability
CVE-2025-32284
WordPress Pet World theme <= 2.8 - PHP Object Injection Vulnerability
CVE-2025-32285
WordPress Butcher theme < 2.54 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32286
WordPress Butcher theme <= 2.40 - Local File Inclusion Vulnerability
CVE-2025-32287
WordPress Responsive HTML5 Audio Player PRO With Playlist plugin <= 3.5.7 - SQL Injection Vulnerability