← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-40729
WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 - Broken Access Control vulnerability
CVE-2026-39701
WordPress ShopWP plugin <= 5.2.4 - Broken Access Control vulnerability
CVE-2026-39704
WordPress Precious Metals Automated Product Pricing – Pro plugin <= 4.0.5 - Broken Access Control vulnerability
CVE-2026-39699
WordPress AI Workflow Automation plugin <= 1.4.2 - Broken Access Control vulnerability
CVE-2026-39709
WordPress The Tribal plugin <= 1.3.4 - Sensitive Data Exposure vulnerability
CVE-2026-39715
WordPress AnyTrack Affiliate Link Manager plugin <= 1.5.5 - Broken Access Control vulnerability
CVE-2026-39707
WordPress Accept PayPal Payments using Contact Form 7 plugin <= 4.0.4 - Broken Access Control vulnerability
CVE-2026-39706
WordPress Make My Trivia plugin <= 1.1.0 - Broken Access Control vulnerability
CVE-2026-39713
WordPress Mailercloud – Integrate webforms and synchronize website contacts plugin <= 1.0.7 - Broken Access Control vulnerability
CVE-2026-39700
WordPress WowOptin plugin <= 1.4.32 - Broken Access Control vulnerability