← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-64289
WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62143
WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability
CVE-2025-62122
WordPress Trash Duplicate and 301 Redirect plugin <= 1.9.1 - Broken Access Control vulnerability
CVE-2025-62116
WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability
CVE-2025-62115
WordPress Hide Plugins plugin <= 1.0.4 - Broken Access Control vulnerability
CVE-2025-62099
WordPress Signature Add-On for Gravity Forms plugin <= 1.8.6 - Broken Access Control vulnerability
CVE-2026-24552
WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability
CVE-2026-73385
WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2026-73384
WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
CVE-2026-73386
WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability