Nguyen Xuan Chien | Patchstack Bug Bounty Program

WordPress Integration for WooCommerce and QuickBooks plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) Vulnerability

WordPress Listdom plugin <= 4.0.0 - Open Redirection Vulnerability

WordPress Administrator Z plugin <= 2025.03.28 - Directory Traversal Vulnerability

WordPress Fast eBay Listings plugin <= 2.12.15 - Open Redirection Vulnerability

WordPress Live Forms plugin <= 4.8.4 - Broken Access Control vulnerability

WordPress Site Search 360 plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) to stored XSS vulnerability

WordPress Contact Form vCard Generator plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Bulk Page Stub Creator plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Basic Interactive World Map plugin <= 2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

WordPress Avatar plugin <= 0.1.4 - Insecure Direct Object References (IDOR) vulnerability