← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-24598
WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerability
CVE-2026-24587
WordPress AJAX Hits Counter + Popular Posts Widget plugin <= 0.10.210305 - Broken Access Control vulnerability
CVE-2026-24570
WordPress Edwiser Bridge plugin <= 4.3.2 - Broken Access Control vulnerability
CVE-2026-24591
WordPress Turn Yoast SEO FAQ Block to Accordion plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24579
WordPress Ai Image Alt Text Generator for WP plugin <= 1.1.9 - Broken Access Control vulnerability
CVE-2026-24584
WordPress Tutor LMS BunnyNet Integration plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24595
WordPress Zoho CRM Lead Magnet plugin <= 1.8.1.9 - Broken Access Control vulnerability
CVE-2026-24571
WordPress BOX NOW Delivery plugin <= 3.0.2 - Broken Access Control vulnerability
CVE-2026-24569
WordPress Media Library File Size plugin <= 1.6.7 - Broken Access Control vulnerability
CVE-2026-24557
WordPress Contact Form 7 GetResponse Extension plugin <= 1.0.8 - Sensitive Data Exposure vulnerability