← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-67578
WordPress WP Email Capture plugin <= 3.12.4 - Broken Access Control vulnerability
CVE-2025-67555
WordPress UseStrict's Calendly Embedder plugin <= 1.1.7.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67466
WordPress Trinity Audio plugin <= 5.23.3 - Broken Access Control vulnerability
CVE-2025-67469
WordPress PDF Thumbnail Generator plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67468
WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.4.6 - Broken Access Control vulnerability
CVE-2025-66131
WordPress Yaad Sarig Payment Gateway For WC plugin <= 2.2.11 - Broken Access Control vulnerability
CVE-2025-66126
WordPress Fix Media Library plugin <= 2.0 - Sensitive Data Exposure vulnerability
CVE-2025-66108
WordPress TNC Toolbox: Web Performance plugin <= 2.0.4 - Broken Access Control vulnerability
CVE-2025-66106
WordPress Featured Post Creative plugin <= 1.5.5 - Broken Access Control vulnerability
CVE-2025-66104
WordPress Offload, AI & Optimize with Cloudflare Images plugin <= 1.9.5 - Broken Access Control vulnerability