← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-49039
WordPress Link View plugin <= 0.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49040
WordPress Backup Bolt plugin <= 1.5.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-49035
WordPress Admin Menu Groups plugin <= 0.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-48364
WordPress rajce plugin <= 0.4.2 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-48365
WordPress Custom Comment plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-48352
WordPress Yandex Site search pinger plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-48357
WordPress Century ToolKit plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) to Arbitrary Plugin Activation vulnerability
CVE-2025-48358
WordPress Risk Free Cash On Delivery (COD) – WooCommerce plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-48361
WordPress Hesabfa Accounting plugin <= 2.2.5 - Sensitive Data Exposure via Log File vulnerability
CVE-2025-48362
WordPress Hesabfa Accounting plugin <= 2.2.5 - Cross Site Request Forgery (CSRF) vulnerability