Nabil Irawan | Patchstack Bug Bounty Program

WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability

WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability

WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability

WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerability

WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability

WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability

WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability

WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability

WordPress Sync Post With Other Site plugin <= 1.9.3 - Arbitrary File Upload vulnerability

WordPress BOX NOW Delivery Croatia plugin <= 3.3.0 - Broken Access Control vulnerability