← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-32394
WordPress PublishPress Capabilities plugin <= 2.31.0 - Broken Access Control vulnerability
CVE-2026-32387
WordPress Checkout for PayPal plugin <= 1.0.46 - Broken Access Control vulnerability
CVE-2026-32362
WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2026-32368
WordPress Geo to Lat plugin <= 1.0.19 - SQL Injection vulnerability
CVE-2026-32357
WordPress Simple Blog Card plugin <= 2.37 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-32367
WordPress Modal Dialog plugin <= 3.5.16 - Remote Code Execution (RCE) vulnerability
CVE-2026-32348
WordPress MAS Videos plugin <= 1.3.2 - Broken Access Control vulnerability
CVE-2026-32331
WordPress Textmetrics plugin <= 3.6.4 - Broken Access Control vulnerability
CVE-2025-67931
WordPress BulletProof Security plugin <= 6.9 - Sensitive Data Exposure vulnerability
CVE-2025-69388
WordPress Cliengo – Chatbot plugin <= 3.0.4 - Broken Access Control vulnerability