← All credits
Nguyen Xuan Chien | Patchstack Bug Bounty Program
435 vulnerability records and advisories credit this contributor.
CVE-2025-52831
WordPress Video List Manager plugin <= 1.7 - SQL Injection Vulnerability
CVE-2025-52809
WordPress National Weather Service Alerts plugin <= 1.3.5 - Local File Inclusion Vulnerability
CVE-2025-52805
WordPress Leyka plugin <= 3.32.1 - Local File Inclusion vulnerability
CVE-2025-52794
WordPress Creative Contact Form plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-52793
WordPress Esselink.nu Settings plugin <= 4.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-52792
WordPress WP User Stylesheet Switcher plugin <= v2.2.0 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-52791
WordPress Knowledge Base – Knowledge Base Maker plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-52790
WordPress WP-DownloadCounter plugin <= 1.01 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-52789
WordPress Lewe ChordPress plugin <= 4.0.1 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerability
CVE-2025-52788
WordPress CaptionPix <= 1.8 - Cross Site Scripting (XSS) Vulnerability