← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-58199
WordPress Fastly plugin <= 1.2.28 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-58033
WordPress Draft Plugin <= 3.0.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58200
WordPress Flexible FAQ Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-57942
WordPress Emergency Password Reset plugin <= 9.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-57983
WordPress BP Disable Activation Reloaded Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58819
WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability
CVE-2025-58818
WordPress Developer Tools Blocker Plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58820
WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58821
WordPress WP Notification Bell plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-58615
WordPress WP Bannerize Pro Plugin <= 1.10.0 - Server Side Request Forgery (SSRF) Vulnerability