← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-25429
WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Injection vulnerability
CVE-2026-25423
WordPress Real 3D FlipBook plugin <= 4.19.1 - Broken Access Control vulnerability
CVE-2026-25430
WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2026-25408
WordPress Broken Link Notifier plugin <= 1.3.5 - Broken Access Control vulnerability
CVE-2026-25410
WordPress WP-CORS plugin <= 0.2.2 - Broken Access Control vulnerability
CVE-2026-25409
WordPress JAMstack Deployments plugin <= 1.1.1 - Broken Access Control vulnerability
CVE-2026-25411
WordPress Revision Manager TMC plugin <= 2.8.22 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-25401
WordPress WPCargo Track & Trace plugin <= 8.0.2 - Broken Access Control vulnerability
CVE-2026-25402
WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 16.011.0 - Broken Access Control vulnerability
CVE-2026-25391
WordPress WP Wand plugin <= 1.3.07 - Broken Access Control vulnerability