← All credits
Pham Van Tam | Patchstack Bug Bounty Program
29 vulnerability records and advisories credit this contributor.
CVE-2025-32254
WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability
CVE-2025-32231
WordPress Bookingor plugin <= 2.0.1 - Broken Access Control vulnerability
CVE-2025-31883
WordPress WebinarPress plugin <= 1.33.28 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31772
WordPress WP Modal Popup with Cookie Integration plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31610
WordPress Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31605
WordPress Welcome Popup plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31591
WordPress Exit Popup Free plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31589
WordPress Ethiopian Calendar plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31588
WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
CVE-2025-31587
WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability