GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

ChuongVN | Patchstack Bug Bounty Program

11 vulnerability records and advisories credit this contributor.

CVE-2026-78267
WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
CVE-2026-24590
WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Broken Access Control vulnerability
CVE-2025-49870
WordPress Paid Member Subscriptions plugin <= 2.15.1 - SQL Injection Vulnerability
CVE-2025-49393
WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability
CVE-2025-58998
WordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability
CVE-2025-58972
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.10.4 - Path Traversal vulnerability
CVE-2025-52717
WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability
CVE-2025-49915
WordPress SMS Alert Order Notifications plugin <= 3.8.5 - SQL Injection vulnerability
CVE-2025-49854
WordPress Slim SEO plugin <= 4.5.4 - SQL Injection Vulnerability
CVE-2025-49059
WordPress CleverReach® WP Plugin <= 1.5.20 - SQL Injection Vulnerability