← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-39675
WordPress Court Reservation plugin <= 1.10.11 - Broken Access Control vulnerability
CVE-2026-39667
WordPress Korea SNS plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39666
WordPress Hello Bar Popup Builder plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39653
WordPress Video Conferencing with Zoom plugin <= 4.6.6 - Broken Access Control vulnerability
CVE-2026-39630
WordPress Getty Images plugin <= 4.1.0 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39631
WordPress WPSchoolPress plugin <= 2.2.35 - Broken Access Control vulnerability
CVE-2026-39614
WordPress JW Player for WordPress plugin <= 2.3.6 - Broken Access Control vulnerability
CVE-2026-39504
WordPress InstaWP Connect plugin <= 0.1.2.5 - Broken Access Control vulnerability
CVE-2026-32587
WordPress WP EasyPay plugin <= 4.2.11 - Broken Access Control vulnerability
CVE-2026-32527
WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.5 - Broken Access Control vulnerability