← All credits
Que Thanh Tuan | Patchstack Bug Bounty Program
62 vulnerability records and advisories credit this contributor.
CVE-2025-58873
WordPress Pushe Web Push Notification Plugin <= 0.5.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58788
WordPress License Manager for WooCommerce Plugin <= 3.0.12 - SQL Injection Vulnerability
CVE-2025-57995
WordPress DethemeKit For Elementor Plugin <= 2.1.10 - Broken Access Control Vulnerability
CVE-2025-15658
WordPress WP Emmet plugin <= 0.3.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27422
WordPress YT Player plugin <= 2.1.2 - Broken Access Control vulnerability
CVE-2026-65490
WordPress Create by Mediavine plugin <= 2.6.0 - Sensitive Data Exposure vulnerability
CVE-2026-27364
WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability
CVE-2026-28169
WordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vulnerability
CVE-2026-39571
WordPress Instantio plugin <= 3.3.30 - Sensitive Data Exposure vulnerability
CVE-2026-39542
WordPress Doofinder for WooCommerce plugin <= 2.10.13 - Sensitive Data Exposure vulnerability