← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-67555
WordPress UseStrict's Calendly Embedder plugin <= 1.1.7.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67466
WordPress Trinity Audio plugin <= 5.23.3 - Broken Access Control vulnerability
CVE-2025-67469
WordPress PDF Thumbnail Generator plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67468
WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.4.6 - Broken Access Control vulnerability
CVE-2025-66126
WordPress Fix Media Library plugin <= 2.0 - Sensitive Data Exposure vulnerability
CVE-2025-66108
WordPress TNC Toolbox: Web Performance plugin <= 2.0.4 - Broken Access Control vulnerability
CVE-2025-66106
WordPress Featured Post Creative plugin <= 1.5.5 - Broken Access Control vulnerability
CVE-2025-66104
WordPress Offload, AI & Optimize with Cloudflare Images plugin <= 1.9.5 - Broken Access Control vulnerability
CVE-2025-66101
WordPress CBX Bookmark & Favorite plugin <= 2.0.1 - Broken Access Control vulnerability
CVE-2025-66097
WordPress I Order Terms plugin <= 1.5.0 - Cross Site Request Forgery (CSRF) vulnerability