← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-32362
WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2026-32368
WordPress Geo to Lat plugin <= 1.0.19 - SQL Injection vulnerability
CVE-2026-32357
WordPress Simple Blog Card plugin <= 2.37 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-32367
WordPress Modal Dialog plugin <= 3.5.16 - Remote Code Execution (RCE) vulnerability
CVE-2026-32348
WordPress MAS Videos plugin <= 1.3.2 - Broken Access Control vulnerability
CVE-2026-32331
WordPress Textmetrics plugin <= 3.6.4 - Broken Access Control vulnerability
CVE-2025-67931
WordPress BulletProof Security plugin <= 6.9 - Sensitive Data Exposure vulnerability
CVE-2025-69388
WordPress Cliengo – Chatbot plugin <= 3.0.4 - Broken Access Control vulnerability
CVE-2025-69023
WordPress Discussion Board plugin <= 2.5.7 - Broken Access Control vulnerability
CVE-2025-49910
WordPress WPGuppy plugin <= 1.1.4 - Broken Access Control vulnerability