← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-31806
WordPress Webling plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31470
WordPress Page Takeover plugin <= 1.1.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-31474
WordPress WP Database Optimizer plugin <= 1.2.1.3 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-30545
WordPress issuuPress plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30526
WordPress Typekit plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-30546
WordPress Cackle plugin <= 4.33 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-0674
WordPress Campaign Monitor for WordPress plugin <= 2.9.1 - Broken Access Control vulnerability
CVE-2025-68604
WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-62127
WordPress WEN Logo Slider plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-40728
WordPress Magazine Blocks plugin <= 1.8.3 - Broken Access Control vulnerability