← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-25014
WordPress Enter Addons plugin <= 2.3.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-25010
WordPress Share This Image plugin <= 2.09 - Broken Access Control vulnerability
CVE-2026-25007
WordPress ElementInvader Addons for Elementor plugin <= 1.4.2 - SQL Injection vulnerability
CVE-2026-25003
WordPress Client Portal plugin <= 1.2.1 - Broken Access Control vulnerability
CVE-2026-24994
WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability
CVE-2026-25000
WordPress Wheel of Life plugin <= 1.2.0 - Broken Access Control vulnerability
CVE-2026-24991
WordPress Extensions For CF7 plugin <= 3.4.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-24986
WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-24985
WordPress WP Forms Signature Contract Add-On plugin <= 1.8.2 - Broken Access Control to Notice Dismissal vulnerability
CVE-2026-24633
WordPress Add Expires Headers & Optimized Minify plugin <= 3.2.0 - Broken Access Control vulnerability