← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-57979
WordPress AuthorSure Plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-57942
WordPress Emergency Password Reset plugin <= 9.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-57935
WordPress Bot Block – Stop Spam Referrals in Google Analytics Plugin <= 2.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-57929
WordPress Double the Donation Plugin <= 2.0.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49906
WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability
CVE-2025-69354
WordPress Better Business Reviews plugin <= 0.1.1 - Broken Access Control vulnerability
CVE-2025-62127
WordPress WEN Logo Slider plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62110
WordPress Rescue Shortcodes plugin <= 3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62104
WordPress ACF Galerie 4 plugin <= 1.4.2 - Broken Access Control vulnerability
CVE-2025-60175
WordPress PopAd Plugin <= 1.0.4 - Server Side Request Forgery (SSRF) Vulnerability