← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-32472
WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability
CVE-2026-32463
WordPress Sync Post With Other Site plugin <= 1.9.3 - Arbitrary File Upload vulnerability
CVE-2026-32473
WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-32467
WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-65504
WordPress BOX NOW Delivery Croatia plugin <= 3.3.0 - Broken Access Control vulnerability
CVE-2026-59552
WordPress 3D Flipbook PDF Viewer & Embedder plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39653
WordPress Video Conferencing with Zoom plugin <= 4.6.6 - Broken Access Control vulnerability
CVE-2026-39631
WordPress WPSchoolPress plugin <= 2.2.35 - Broken Access Control vulnerability
CVE-2026-39630
WordPress Getty Images plugin <= 4.1.0 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-39614
WordPress JW Player for WordPress plugin <= 2.3.6 - Broken Access Control vulnerability