← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-68604
WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62127
WordPress WEN Logo Slider plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-40728
WordPress Magazine Blocks plugin <= 1.8.3 - Broken Access Control vulnerability
CVE-2026-40729
WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 - Broken Access Control vulnerability
CVE-2026-39701
WordPress ShopWP plugin <= 5.2.4 - Broken Access Control vulnerability
CVE-2026-39704
WordPress Precious Metals Automated Product Pricing – Pro plugin <= 4.0.5 - Broken Access Control vulnerability
CVE-2026-39699
WordPress AI Workflow Automation plugin <= 1.4.2 - Broken Access Control vulnerability
CVE-2026-39709
WordPress The Tribal plugin <= 1.3.4 - Sensitive Data Exposure vulnerability
CVE-2026-39715
WordPress AnyTrack Affiliate Link Manager plugin <= 1.5.5 - Broken Access Control vulnerability
CVE-2026-39707
WordPress Accept PayPal Payments using Contact Form 7 plugin <= 4.0.4 - Broken Access Control vulnerability