← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-62147
WordPress Realbig plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2025-62143
WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability
CVE-2025-62142
WordPress Post Video Players plugin <= 1.163 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62145
WordPress DMCA Protection Badge plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2025-62144
WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.28 - Broken Access Control vulnerability
CVE-2025-62146
WordPress MX Time Zone Clocks plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62133
WordPress FormFacade plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62119
WordPress Add Featured Image Custom Link plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62124
WordPress WP Post Signature plugin <= 0.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62123
WordPress WP Gmail SMTP plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability