← All credits
Nguyen Xuan Chien | Patchstack Bug Bounty Program
435 vulnerability records and advisories credit this contributor.
CVE-2025-46441
WordPress Section Widget plugin <= 3.3.1 - Path Traversal vulnerability
CVE-2025-46440
WordPress kStats Reloaded plugin <= 0.7.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-46439
WordPress Plugin Central plugin <= 2.5.1 - CSRF to Arbitrary File Deletion vulnerability
CVE-2025-46437
WordPress Tayori Form plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-46436
WordPress SCSS-Library plugin <= 0.4.1 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-46435
WordPress Time Based Greeting plugin <= 2.2.2 - CSRF to Stored XSS vulnerability
CVE-2025-43839
WordPress BP Messages Tool plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-43837
WordPress Total Donations <= 3.0.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-43836
WordPress Syndicate Out <= 0.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-39601
WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability