← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-32424
WordPress Sprout Clients plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32417
WordPress Pochipp plugin < 1.18.9 - Broken Access Control vulnerability
CVE-2026-32428
WordPress Popup Like box plugin <= 3.7.7 - Broken Access Control vulnerability
CVE-2026-32425
WordPress Payment Gateway Pix For GiveWP plugin <= 2.2.3 - Broken Access Control vulnerability
CVE-2026-32416
WordPress PDF Poster plugin <= 2.4.0 - Broken Access Control vulnerability
CVE-2026-32404
WordPress Studio99 WP Monitor plugin <= 1.0.3 - Broken Access Control vulnerability
CVE-2026-32402
WordPress Image Slider by Ays plugin <= 2.7.1 - Broken Access Control vulnerability
CVE-2026-32395
WordPress Xpro Addons For Beaver Builder – Lite plugin <= 1.5.6 - Broken Access Control vulnerability
CVE-2026-32394
WordPress PublishPress Capabilities plugin <= 2.31.0 - Broken Access Control vulnerability
CVE-2026-32387
WordPress Checkout for PayPal plugin <= 1.0.46 - Broken Access Control vulnerability