← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-46537
WordPress Section Widget plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-46529
WordPress Business Contact Widget plugin <= 2.7.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46525
WordPress WP Cookie Consent plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46521
WordPress WS Force Login Page plugin <= 3.0.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46517
WordPress Blog Manager WP plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46513
WordPress All in One Time Clock Lite plugin < 1.3.326 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-46485
WordPress WP Customize Login Page plugin <= 1.6.5 - Broken Access Control Vulnerability
CVE-2025-46469
WordPress Send From plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46477
WordPress WP Customize Login Page plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46451
WordPress Floating Social Bar plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability