← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-22490
WordPress Bulk Landing Page Creator for WordPress LPagery plugin <= 2.4.9 - Broken Access Control vulnerability
CVE-2026-22487
WordPress Speed Kit plugin <= 2.0.2 - Broken Access Control vulnerability
CVE-2026-22489
WordPress Image Slider Slideshow plugin <= 1.8 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-69355
WordPress Tickera plugin <= 3.5.6.4 - Broken Access Control vulnerability
CVE-2025-69354
WordPress Better Business Reviews plugin <= 0.1.1 - Broken Access Control vulnerability
CVE-2025-69349
WordPress RSS Feed Widget plugin <= 3.0.2 - Broken Access Control vulnerability
CVE-2025-68585
WordPress WP Document Revisions plugin <= 3.7.2 - Broken Access Control vulnerability
CVE-2025-68581
WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability
CVE-2025-68583
WordPress Fast User Switching plugin <= 1.4.10 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-68584
WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site Request Forgery (CSRF) vulnerability