← All credits
thiennv | Patchstack Bug Bounty Program
72 vulnerability records and advisories credit this contributor.
CVE-2025-32567
WordPress Easy Post Duplicator Plugin <= 1.0.1 - SQL Injection vulnerability
CVE-2025-32556
WordPress Simple Post Meta Manager Plugin <= 1.0.9 - CSRF to Reflected Cross-Site Scripting vulnerability
CVE-2025-32517
WordPress MultiMailer plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32515
WordPress Terminal Africa plugin <= 1.13.24 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32512
WordPress Revamp CRM for WooCommerce plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32511
WordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32249
WordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32178
WordPress 6Storage Rentals plugin <= 2.20.2 - Broken Access Control vulnerability
CVE-2025-32147
WordPress Easy WP Optimizer Plugin <= 1.1.0 - Broken Access Control vulnerability
CVE-2025-31736
WordPress Rich Text Editor Plugin <= 1.0.1 - Broken Access Control vulnerability