← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-62873
WordPress WP Flashy Marketing Automation plugin <= 2.0.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62872
WordPress Social Photo Fetcher plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62871
WordPress Just TinyMCE Custom Styles plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62869
WordPress Gravitec.net – Web Push Notifications plugin <= 2.9.17 - Broken Access Control vulnerability
CVE-2025-62866
WordPress Auto Alt Text plugin <= 2.5.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62865
WordPress Post Cloner plugin <= 1.0.0 - Broken Access Control vulnerability
CVE-2025-62737
WordPress Image Cleanup plugin <= 1.9.2 - Sensitive Data Exposure vulnerability
CVE-2025-62736
WordPress Image Cleanup plugin <= 1.9.2 - Broken Access Control vulnerability
CVE-2025-62735
WordPress User Spam Remover plugin <= 1.1 - Sensitive Data Exposure vulnerability
CVE-2025-62734
WordPress Media Library Downloader plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability