← All credits
Nguyen Xuan Chien | Patchstack Bug Bounty Program
435 vulnerability records and advisories credit this contributor.
CVE-2025-30556
WordPress Fix Rss Feeds plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-30528
WordPress Awesome Logos plugin <= 1.2 - CSRF to SQL Injection vulnerability
CVE-2025-30525
WordPress WP Profitshare plugin <= 1.4.9 - SQL Injection vulnerability
CVE-2025-30520
WordPress Breezing Forms plugin <= 1.2.8.11 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-29003
WordPress The Holiday Calendar plugin <= 1.18.2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-28986
WordPress Epicwin Plugin plugin <= 1.5 - CSRF to SQL Injection vulnerability
CVE-2025-28981
WordPress WP Mail Options plugin <= 0.2.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-28978
WordPress SB Breadcrumbs plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-28974
WordPress Free WP Mail SMTP plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
CVE-2025-28968
WordPress WP Wall plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability