← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-58221
WordPress PilotPress Plugin <= 2.0.36 - Broken Access Control Vulnerability
CVE-2025-58029
WordPress Classic Widgets with Block-based Widgets Plugin <= 1.0.1 - Broken Access Control Vulnerability
CVE-2025-57915
WordPress TOCHAT.BE Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-57982
WordPress Advance Portfolio Grid plugin <= 1.07.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-57934
WordPress LWS Affiliation Plugin <= 2.3.6 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-57929
WordPress Double the Donation Plugin <= 2.0.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53287
WordPress Quick Favicon plugin <= 0.22.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2026-45210
WordPress Broadstreet Ads plugin <= 1.52.2 - Broken Access Control vulnerability
CVE-2025-62134
WordPress Contact Form Widget plugin <= 1.5.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-58199
WordPress Fastly plugin <= 1.2.28 - Cross Site Request Forgery (CSRF) vulnerability