← All credits
Truoc Phan
38 vulnerability records and advisories credit this contributor.
CVE-2023-3199
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
CVE-2024-6397
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin
CVE-2024-4898
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation
CVE-2023-3200
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update
CVE-2024-7855
WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2023-3416
tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
CVE-2025-2806
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'
CVE-2024-3888
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
CVE-2025-2804
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'
CVE-2023-3197
MStore API <= 4.0.1 - Unauthenticated SQL Injection