← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-62134
WordPress Contact Form Widget plugin <= 1.5.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-58199
WordPress Fastly plugin <= 1.2.28 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-58222
WordPress Team Manager plugin <= 2.5.1 - Broken Access Control vulnerability
CVE-2025-58033
WordPress Draft Plugin <= 3.0.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58200
WordPress Flexible FAQ Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-57983
WordPress BP Disable Activation Reloaded Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58819
WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability
CVE-2025-58818
WordPress Developer Tools Blocker Plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58820
WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58821
WordPress WP Notification Bell plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability