← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-58222
WordPress Team Manager plugin <= 2.6.7 - Broken Access Control vulnerability
CVE-2025-57972
WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability
CVE-2025-57906
WordPress Epeken All Kurir plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-53460
WordPress AffiliateWP – External Referral Links Plugin <= 1.2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-69023
WordPress Discussion Board plugin <= 2.5.7 - Broken Access Control vulnerability
CVE-2025-69349
WordPress RSS Feed Widget plugin <= 3.0.2 - Broken Access Control vulnerability
CVE-2025-68573
WordPress Simple Keyword to Link plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67931
WordPress BulletProof Security plugin <= 6.9 - Sensitive Data Exposure vulnerability
CVE-2025-66131
WordPress Yaad Sarig Payment Gateway For WC plugin <= 2.2.11 - Broken Access Control vulnerability
CVE-2025-64239
WordPress RTL Tester plugin <= 1.2 - Cross Site Request Forgery (CSRF) vulnerability