← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-50024
WordPress ATP Call Now plugin <= 1.0.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50019
WordPress Simple Sticky Footer plugin <= 1.3.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50023
WordPress CodePen Embed Block plugin <= 1.2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50020
WordPress RDFa Breadcrumb plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50021
WordPress Better Random Redirect plugin <= 1.3.20 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50026
WordPress Spoki plugin <= 2.17.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-50022
WordPress WP-FB-AutoConnect plugin <= 4.6.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49906
WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability
CVE-2025-49902
WordPress Login Page Customizer – Customizer Login Page, Admin Page, Custom Design plugin <= 2.1.1 - Broken Access Control vulnerability
CVE-2025-49864
WordPress AFS Analytics plugin <= 4.21 - Broken Access Control Vulnerability