← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-39713
WordPress Mailercloud – Integrate webforms and synchronize website contacts plugin <= 1.0.7 - Broken Access Control vulnerability
CVE-2026-39700
WordPress WowOptin plugin <= 1.4.32 - Broken Access Control vulnerability
CVE-2026-39695
WordPress Podigee plugin <= 1.4.0 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39698
WordPress The Publisher Desk ads.txt plugin <= 1.5.0 - Broken Access Control vulnerability
CVE-2026-39663
WordPress TrueBooker plugin <= 1.1.5 - Broken Access Control vulnerability
CVE-2026-39682
WordPress linkPizza-Manager plugin <= 5.5.5 - Broken Access Control vulnerability
CVE-2026-39690
WordPress Author Avatars List/Block plugin <= 2.1.25 - Broken Access Control vulnerability
CVE-2026-39658
WordPress Panda Pods Repeater Field plugin <= 1.5.12 - Broken Access Control vulnerability
CVE-2026-39683
WordPress Garden Gnome Package plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39691
WordPress Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin <= 2.2.13 - Broken Access Control vulnerability