← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-30632
WordPress Global Translator plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-30627
WordPress Elegant Visitor Counter plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-30625
WordPress AppBanners plugin <= 1.5.14 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-30623
WordPress wA11y – The Web Accessibility Toolbox plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30606
WordPress Easy Page Transition plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30599
WordPress WP Parallax Content Slider plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30605
WordPress sourceplay-navermap plugin <= 0.0.2 - Broken Access Control vulnerability
CVE-2025-30600
WordPress WP Hotjar plugin <= 0.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30603
WordPress CopyLink plugin <= 1.1 - CSRF to Stored XSS vulnerability
CVE-2025-30601
WordPress Flipdish Ordering System plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability