← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-62922
WordPress Export Categories plugin <= 1.0 - Broken Access Control vulnerability
CVE-2025-62920
WordPress USERCENTRICS CMP plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62891
WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62892
WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability
CVE-2025-62867
WordPress Ergonet Cache plugin <= 1.0.13 - Broken Access Control vulnerability
CVE-2025-62762
WordPress SMTP Mail plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62148
WordPress Robots.txt rewrite plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62152
WordPress ConveyThis plugin <= 269.2 - Broken Access Control vulnerability
CVE-2025-62153
WordPress Quick Interest Slider plugin <= 3.1.7 - Broken Access Control vulnerability
CVE-2025-62147
WordPress Realbig plugin <= 1.1.3 - Broken Access Control vulnerability