← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-68584
WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62973
WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability
CVE-2025-58222
WordPress Team Manager plugin <= 2.6.8 - Broken Access Control vulnerability
CVE-2025-64289
WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24552
WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability
CVE-2026-73384
WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
CVE-2026-73385
WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2026-73386
WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability
CVE-2026-32467
WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-32473
WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability