← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-23805
WordPress Media Search Enhanced plugin <= 0.9.1 - SQL Injection vulnerability
CVE-2026-22488
WordPress Dashboard Welcome for Beaver Builder plugin <= 1.0.8 - Broken Access Control vulnerability
CVE-2026-22490
WordPress Bulk Landing Page Creator for WordPress LPagery plugin <= 2.4.9 - Broken Access Control vulnerability
CVE-2026-22487
WordPress Speed Kit plugin <= 2.0.2 - Broken Access Control vulnerability
CVE-2026-22489
WordPress Image Slider Slideshow plugin <= 1.8 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-69355
WordPress Tickera plugin <= 3.5.6.4 - Broken Access Control vulnerability
CVE-2025-69349
WordPress RSS Feed Widget plugin <= 3.0.2 - Broken Access Control vulnerability
CVE-2025-68585
WordPress WP Document Revisions plugin <= 3.7.2 - Broken Access Control vulnerability
CVE-2025-68581
WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerability
CVE-2025-68583
WordPress Fast User Switching plugin <= 1.4.10 - Cross Site Request Forgery (CSRF) vulnerability