← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-24523
WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability
CVE-2026-24521
WordPress Kama Thumbnail plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-24388
WordPress WPMasterToolKit plugin <= 2.14.0 - Broken Access Control vulnerability
CVE-2026-24386
WordPress Element Invader – Template Kits for Elementor plugin <= 1.2.4 - Broken Access Control vulnerability
CVE-2026-24387
WordPress WP Quick Post Duplicator plugin <= 2.1 - Broken Access Control vulnerability
CVE-2026-24379
WordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-24376
WordPress WPVulnerability plugin <= 4.2.1 - Broken Access Control vulnerability
CVE-2026-24377
WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerability
CVE-2026-23805
WordPress Media Search Enhanced plugin <= 0.9.1 - SQL Injection vulnerability
CVE-2026-22488
WordPress Dashboard Welcome for Beaver Builder plugin <= 1.0.8 - Broken Access Control vulnerability