← All credits
Muhammad Nur Ibnu Hubab | Patchstack Bug Bounty Program
22 vulnerability records and advisories credit this contributor.
CVE-2025-67627
WordPress Draft Notify plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67630
WordPress WH Tweaks plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67629
WordPress Basticom Framework plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67624
WordPress Optimize More! – Images plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2025-67628
WordPress Review Disclaimer plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62139
WordPress Terms descriptions plugin <= 3.4.10 - Sensitive Data Exposure vulnerability
CVE-2025-62089
WordPress Mergado Pack plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62081
WordPress Live Shopping & Shoppable Videos For WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2025-62080
WordPress Live Shopping & Shoppable Videos For WooCommerce plugin <= 2.2.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-59137
WordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability