Nguyen Ba Khanh - HPT Vietnam Corporation

4,515.65

XP

150

Reports

3

Reports, last 90 days

#36

15 Sep, 2026
🇻🇳
Lvl 7
0
0
3
2
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
Page Visits Counter &#8211; Lite<= 1.2.3
Cross Site Scripting (XSS)
14.2
7.1
06/04/2026
EventON<= 2.5.7
Cross Site Scripting (XSS)
6.5
6.5
18/04/2026
WC Ukraine Shipping<= 1.22.5
Insecure Direct Object References (IDOR)
7.1
7.1
30/01/2026
Kalles Addons<= 1.0.6
Cross Site Scripting (XSS)
6.5
6.5
02/04/2026
Uncode<= 2.12.7
Cross Site Scripting (XSS)
28.4
7.1
07/08/2026
NotificationX Pro<= 3.1.4
Cross Site Scripting (XSS)
7.1
7.1
24/06/2026
Tagembed<= 7.4
Cross Site Scripting (XSS)
14.2
7.1
22/06/2026
Global Gallery<= 11.1.2
Cross Site Scripting (XSS)
7.1
7.1
07/08/2026
B2BKing<= 5.2.30
Broken Access Control
12.42
5.4
09/01/2026
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent<= 4.3.9
Cross Site Scripting (XSS)
4.88
6.5
03/08/2026
Sticky Chat Widget<= 1.4.2
SQL Injection
37.2
9.3
26/04/2026
Tablesome<= 1.2.12
SQL Injection
42.78
9.3
21/04/2026
Directories Pro<= 2.0.5
Privilege Escalation
23.1
7.7
16/04/2026
GeekyBot<= 1.2.6
Cross Site Scripting (XSS)
12.25
7.1
27/06/2026
Total Upkeep<= 1.17.2
Broken Access Control
49.2
8.2
13/03/2026
Ultimate Addons for Elementor<= 1.45.2
Cross Site Scripting (XSS)
16.82
6.5
24/07/2026
Ultimate Addons for Contact Form 7<=3.5.45
Cross Site Scripting (XSS)
48.99
7.1
27/06/2026
Ultimate Store Kit Elementor Addons<= 3.0.5
Cross Site Scripting (XSS)
11.21
6.5
09/01/2026
Advanced Views<= 3.8.11
Remote Code Execution (RCE)
14.85
9.9
23/06/2026
MailPoet5.30.0-5.33.0
Cross Site Request Forgery (CSRF)
21.3
7.1
24/06/2026
Smart Manager<= 8.90.0
Cross Site Scripting (XSS)
8.17
7.1
18/06/2026
NEX-Forms<= 9.2.2
Cross Site Scripting (XSS)
14.2
7.1
28/01/2026
ICS Calendar<= 12.1.1
Cross Site Scripting (XSS)
14.2
7.1
27/06/2026
Free Gifts for WooCommerce<= 13.1.0
Cross Site Scripting (XSS)
14.2
7.1
20/04/2026
Simple File List<= 6.3.8
Cross Site Scripting (XSS)
7.1
7.1
20/06/2026
JobSearch<= 3.2.9
Cross Site Scripting (XSS)
16.33
7.1
23/04/2026
EduMall<= 4.5.1
Broken Access Control
N/A
4.3
09/03/2026
Advanced Shipment Tracking for WooCommerce<= 4.0
SQL Injection
11.4
7.6
01/02/2026
Sendcloud Shipping<= 1.0.31
Broken Access Control
N/A
5.3
10/02/2026
Kit (formerly ConvertKit) for WooCommerce<= 2.1.6
Sensitive Data Exposure
N/A
5.3
09/02/2026
Survey Maker<= 5.2.2.5
Cross Site Scripting (XSS)
14.2
7.1
29/04/2026
Modula - PRO<= 2.10.8
Cross Site Scripting (XSS)
10.65
7.1
20/04/2026
WP Photo Album Plus<= 9.2.02.004
Cross Site Scripting (XSS)
14.2
7.1
17/06/2026
WowAddons<= 1.6.14
Cross Site Scripting (XSS)
14.2
7.1
09/03/2026
wpDataTables<= 6.5.1.1
Cross Site Scripting (XSS)
48.99
7.1
22/06/2026
Admin and Site Enhancements (ASE) Pro<= 8.8.5
Cross Site Scripting (XSS)
9.6
9.6
18/06/2026
Blocksy Companion Pro<= 2.1.46
Remote Code Execution (RCE)
207
10
19/06/2026
WooCommerce Designer Pro<= 1.9.34
Cross Site Scripting (XSS)
6.5
6.5
14/04/2026
Exclusive Addons Elementor<= 2.7.9.8
Cross Site Scripting (XSS)
14.63
6.5
01/02/2026
weMail<= 2.1.2
Cross Site Scripting (XSS)
32.66
7.1
20/01/2026
FOX<= 1.4.8
Cross Site Scripting (XSS)
48.99
7.1
08/06/2026
JetSmartFilters<= 3.8.3
SQL Injection
42.78
9.3
17/06/2026
Automatic< 3.135.1
Cross Site Scripting (XSS)
28.4
7.1
23/04/2026
Responsive Lightbox<= 2.7.6
Cross Site Scripting (XSS)
56.8
7.1
10/03/2026
Filter & Grids<= 3.11.5
SQL Injection
27.9
9.3
07/06/2026
Advanced Ads<= 2.0.21
Remote Code Execution (RCE)
67.5
7.5
10/04/2026
JobSearch<= 3.2.9
SQL Injection
42.78
9.3
23/04/2026
Cornerstone< 7.8.8
SQL Injection
17
8.5
23/04/2026
SEO Plugin by Squirrly SEO<= 12.4.16
Broken Access Control
30
7.5
12/03/2026
WooCommerce POS<= 1.8.14
Broken Access Control
15
7.5
14/02/2026
WorkScout-Core<= 1.7.11
Arbitrary File Deletion
39
6.5
13/04/2026
SigmaForms Pro – AI Generated Forms<= 1.4.5
Arbitrary File Upload
N/A
9
07/06/2026
WP Migrate Lite<= 2.7.8
Cross Site Request Forgery (CSRF)
11.75
4.7
11/02/2026
WooCommerce Dropshipping<= 5.2.4
Broken Authentication
39
6.5
20/04/2026
Cornerstone< 7.8.8
Arbitrary Code Execution
25.5
8.5
23/04/2026
Dokan<= 5.0.2
Privilege Escalation
52.8
8.8
29/04/2026
Affiliate Super Assistent<= 1.10.1
Cross Site Scripting (XSS)
14.2
7.1
30/04/2026
Modula Image Gallery<= 2.14.23
Cross Site Scripting (XSS)
59.8
6.5
26/04/2026
YITH WooCommerce Product Add-Ons<= 4.29.0
SQL Injection
8.74
7.6
26/01/2026
Smart Manager<= 8.85.0
Privilege Escalation
45.54
8.8
09/03/2026
MyCryptoCheckout<= 2.161
Broken Access Control
15
7.5
19/01/2026
wpForo Forum<= 3.0.4
SQL Injection
37.2
9.3
07/04/2026
SliceWP<= 1.2.6
Cross Site Scripting (XSS)
14.2
7.1
12/03/2026
AutomatorWP<= 5.6.7
Cross Site Scripting (XSS)
14.4
7.2
06/03/2026
PowerPack Pro for Elementor< v2.13.0
Broken Authentication
121.44
8.8
03/04/2026
SureForms Pro<= 2.8.0
Broken Access Control
33.58
7.3
20/04/2026
Blocksy Companion Pro<= 2.1.37
Remote Code Execution (RCE)
66.83
9.9
13/03/2026
GeekyBot<= 1.2.2
Arbitrary File Upload
138
10
09/03/2026
Coupon Affiliates<= 7.5.3
Cross Site Scripting (XSS)
32.66
7.1
07/03/2026
Notification for Telegram<= 3.5
Cross Site Scripting (XSS)
14.2
7.1
11/02/2026
WPZOOM Addons for Elementor<= 1.3.4
Cross Site Scripting (XSS)
16.33
7.1
11/02/2026
Redsys for WooCommerce Light<= 7.0.0
Broken Access Control
15
7.5
14/02/2026
Social Slider Feed<= 2.3.2
Cross Site Scripting (XSS)
16.33
7.1
06/02/2026
Shipment Tracker for Woocommerce<= 1.5.3.2
Cross Site Scripting (XSS)
7.48
6.5
26/01/2026
Post Duplicator<= 3.0.10
PHP Object Injection
66
8.8
28/01/2026
Booking Activities<= 1.16.48.1
Broken Access Control
13
6.5
27/01/2026
Meta Box – WordPress Custom Fields Framework<= 5.11.1
Arbitrary File Deletion
105.57
6.8
27/01/2026
JupiterX Core<= 4.14.1
Cross Site Scripting (XSS)
19.5
6.5
18/01/2026
SpeakOut! Email Petitions<= 4.6.5
SQL Injection
42.78
9.3
11/02/2026
Blocksy Companion Pro< 2.1.29
SQL Injection
111.6
9.3
03/02/2026
GeekyBot<= 1.2.0
SQL Injection
85.56
9.3
28/01/2026
WooCommerce Cart Abandonment Recovery< 2.1.0
Privilege Escalation
62.1
7.2
26/01/2026
WP Maps<= 4.9.1
SQL Injection
111.6
9.3
17/01/2026
Form Maker by 10Web<= 1.15.38
SQL Injection
85.56
9.3
16/01/2026
Event Tickets Manager for WooCommerce<= 1.5.3
Broken Access Control
17.25
7.5
31/01/2026
Ocean Extra<= 2.5.3
Broken Access Control
37.26
5.4
27/01/2026
Woody ad snippets<= 2.7.1
Remote Code Execution (RCE)
66.83
9.9
17/01/2026
WP REST Cache<= 2026.1.0
Cross Site Scripting (XSS)
32.66
7.1
15/01/2026
User Verification<= 2.0.45
Broken Authentication
36.57
5.3
19/01/2026
WP User Frontend<= 4.2.8
Broken Access Control
34.5
7.5
09/01/2026
YML for Yandex Market< 5.3.0
Arbitrary File Deletion
5.1
6.8
28/01/2026
OOPSpam Anti-Spam<= 1.2.62
Cross Site Scripting (XSS)
32.66
7.1
11/02/2026
PublishPress Revisions<= 3.7.23
SQL Injection
85.56
9.3
04/02/2026
Photo Engine<= 6.4.9
Arbitrary File Upload
15.7
9.1
27/01/2026
ChatBot<= 7.7.9
SQL Injection
37.2
9.3
20/01/2026
Abandoned Cart Recovery for WooCommerce<= 1.1.10
Cross Site Scripting (XSS)
32.66
7.1
28/01/2026
Visual Portfolio, Photo Gallery & Post Grid<= 3.5.1
Local File Inclusion
45
7.5
01/02/2026
SMTP Mailer<= 1.1.24
Sensitive Data Exposure
45
7.5
02/02/2026
Restrict Content<= 3.2.22
Broken Access Control
15
7.5
13/02/2026
Contextual Related Posts< 4.2.2
Broken Access Control
73.14
5.3
01/02/2026

Report vulnerabilities to earn bounties and rewards!

Read more