← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-32679
WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32207
WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32226
WordPress Display product variations dropdown on shop page plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2025-31806
WordPress Webling plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31470
WordPress Page Takeover plugin <= 1.1.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-31474
WordPress WP Database Optimizer plugin <= 1.2.1.3 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-30545
WordPress issuuPress plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30526
WordPress Typekit plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-30546
WordPress Cackle plugin <= 4.33 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-0674
WordPress Campaign Monitor for WordPress plugin <= 2.9.1 - Broken Access Control vulnerability