← All credits
Nguyen Ba Khanh | Patchstack Bug Bounty Program
113 vulnerability records and advisories credit this contributor.
CVE-2026-65439
WordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57704
WordPress Smart Manager plugin <= 8.90.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59543
WordPress Advanced Views plugin <= 3.8.11 - Remote Code Execution (RCE) vulnerability
CVE-2026-57626
WordPress MailPoet plugin 5.30.0-5.33.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-65503
WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57382
WordPress Simple File List plugin <= 6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-57383
WordPress JobSearch plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57396
WordPress Free Gifts for WooCommerce plugin <= 13.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57797
WordPress EduMall theme <= 4.5.1 - Broken Access Control vulnerability
CVE-2026-59516
WordPress ICS Calendar plugin <= 12.1.1 - Cross Site Scripting (XSS) vulnerability