← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-58000
WordPress Memberful plugin <= 1.75.0 - Broken Access Control vulnerability
CVE-2025-57994
WordPress Upcoming Events Lists Plugin <= 1.4.0 - Insecure Direct Object References (IDOR) Vulnerability
CVE-2025-57992
WordPress Mail Baby SMTP plugin <= 2.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-57991
WordPress Clariti Plugin <= 1.2.1 - Broken Access Control Vulnerability
CVE-2025-57985
WordPress Ultimate Watermark Plugin <= 1.1 - Broken Access Control Vulnerability
CVE-2025-57984
WordPress MakeStories (for Google Web Stories) Plugin <= 3.0.4 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-57980
WordPress Safety Exit Plugin <= 1.8.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-57978
WordPress Advanced Appointment Booking & Scheduling plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-57979
WordPress AuthorSure Plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-57969
WordPress Hide WP Toolbar Plugin <= 2.7 - Broken Access Control Vulnerability