← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-49412
WordPress Page Transition plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49392
WordPress Themify Audio Dock Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49391
WordPress Sign-up Sheets Plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-49389
WordPress Notice Bar Plugin <= 3.1.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49390
WordPress Cookie Notice & Consent plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49349
WordPress Reuters Direct plugin <= 3.0.0 - Broken Access Control vulnerability
CVE-2025-49317
WordPress WP Page Loading plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-49262
WordPress Sina Extension for Elementor plugin <= 3.6.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49047
WordPress DigitalOcean Spaces Sync plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49048
WordPress Inspectlet – User Session Recording and Heatmaps plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability