← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-30532
WordPress Weather Layer plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30533
WordPress Message ticker plugin <= 9.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-30536
WordPress Beautiful Link Preview plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30535
WordPress External image replace plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
CVE-2025-30530
WordPress AI Preloader plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30529
WordPress Auto Load Next Post plugin <= 1.5.14 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-30527
WordPress My Bootstrap Menu plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-28943
WordPress DP ALTerminator - Missing ALT manager Plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-28937
WordPress Lava Ajax Search plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-28936
WordPress Lunar plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability