← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-47612
WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability
CVE-2025-47609
WordPress EasyMe Connect plugin <= 3.0.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-47606
WordPress Simple Giveaways plugin <= 2.49.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-47595
WordPress Color Your Bar plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47596
WordPress Beacon Lead Magnets and Lead Capture plugin <= 1.5.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-47592
WordPress Legal Terms and Conditions Popup for User Login and WooCommerce Checkout – TPUL plugin <= 2.0.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47593
WordPress Really Simple Under Construction Page plugin <= 1.4.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47517
WordPress Accept Donations with PayPal plugin <= 1.4.5 - CSRF to Stored XSS vulnerability
CVE-2025-47523
WordPress Seznam Webmaster plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-47525
WordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability