← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-24547
WordPress SiteGround Email Marketing plugin <= 1.7.5 - Broken Access Control vulnerability
CVE-2025-63041
WordPress Forget About Shortcode Buttons plugin <= 2.1.3 - Broken Access Control vulnerability
CVE-2026-56030
WordPress Paytium plugin <= 5.0.2 - Privilege Escalation vulnerability
CVE-2026-57323
WordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerability
CVE-2025-60175
WordPress PopAd Plugin <= 1.0.4 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2026-24520
WordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerability
CVE-2026-24574
WordPress Export WP Page to Static HTML/CSS plugin <= 6.0.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-24582
WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability
CVE-2026-24592
WordPress Auto Affiliate Links plugin <= 6.8.8.3 - Broken Access Control vulnerability
CVE-2026-39593
WordPress HAPPY plugin <= 1.0.10 - Broken Access Control vulnerability