← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-58222
WordPress Team Manager plugin <= 2.6.7 - Broken Access Control vulnerability
CVE-2025-57972
WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability
CVE-2025-57906
WordPress Epeken All Kurir plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-53460
WordPress AffiliateWP – External Referral Links Plugin <= 1.2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-64289
WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24552
WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability
CVE-2026-73384
WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
CVE-2026-73385
WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2026-73386
WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability
CVE-2026-32467
WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability