← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-47605
WordPress WP jQuery DataTable plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47638
WordPress WP Discord Invite plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-46459
WordPress Confirm User Registration plugin <= 2.1.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46442
WordPress Loan Calculator plugin <= 1.3 - CSRF to Stored XSS vulnerability
CVE-2025-46229
WordPress Textmetrics plugin <= 3.6.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-39425
WordPress Style Manager plugin <= 2.2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
CVE-2025-39546
WordPress ElementsReady Addons for Elementor plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-32679
WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-32207
WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32226
WordPress Display product variations dropdown on shop page plugin <= 1.1.3 - Broken Access Control vulnerability