← All credits
Nguyen Xuan Chien | Patchstack Bug Bounty Program
435 vulnerability records and advisories credit this contributor.
CVE-2025-28966
WordPress Recent Posts Slider Responsive plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-28964
WordPress Personal Favicon plugin <= 2.0 - CSRF to Stored XSS vulnerability
CVE-2025-28960
WordPress Evangelische Termine plugin <= 3.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-28958
WordPress Bg Orthodox Calendar plugin <= 0.13.10 - CSRF to Stored XSS vulnerability
CVE-2025-28956
WordPress Backwp plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-28954
WordPress Backwp plugin <= 2.0.2 - CSRF to Arbitrary File Deletion vulnerability
CVE-2025-28952
WordPress CubePoints plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-28941
WordPress SPAM-BYBYE Plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-28940
WordPress Back To Top Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-28925
WordPress WATI Chat and Notification plugin <= 1.1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability