← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-28926
WordPress Post Read Time plugin <= 1.2.6 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-28927
WordPress Display Template Name plugin <= 1.7.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-28914
WordPress wordpress login form to anywhere plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-28915
WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability
CVE-2025-28907
WordPress WP Last Modified plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-28906
WordPress Skitter Slideshow plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-28908
WordPress pipDisqus plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-28897
WordPress Domain Theme plugin <= 1.3 - CSRF to Stored XSS vulnerability
CVE-2025-28878
WordPress Awesome Surveys plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability
CVE-2025-28871
WordPress Block Spam By Math Reloaded plugin <= 2.2.4 - Cross Site Scripting (XSS) vulnerability