← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-68070
WordPress VK Google Job Posting Manager plugin <= 1.2.22 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68012
WordPress CodeColorer plugin <= 0.10.1 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-67948
WordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerability
CVE-2025-67585
WordPress Flexmls® IDX plugin <= 3.15.7 - Open Redirection vulnerability
CVE-2025-67556
WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67470
WordPress Portfolio and Projects plugin <= 1.5.5 - Sensitive Data Exposure vulnerability
CVE-2025-62974
WordPress Headline Analyzer plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62973
WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
CVE-2025-62921
WordPress Bulk Auto Image Title Attribute plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62873
WordPress WP Flashy Marketing Automation plugin <= 2.0.8 - Cross Site Request Forgery (CSRF) vulnerability