← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-24547
WordPress SiteGround Email Marketing plugin <= 1.7.5 - Broken Access Control vulnerability
CVE-2026-57323
WordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerability
CVE-2026-56030
WordPress Paytium plugin <= 5.0.2 - Privilege Escalation vulnerability
CVE-2026-45210
WordPress Broadstreet Ads plugin <= 1.52.2 - Broken Access Control vulnerability
CVE-2026-40729
WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 - Broken Access Control vulnerability
CVE-2026-40728
WordPress Magazine Blocks plugin <= 1.8.3 - Broken Access Control vulnerability
CVE-2026-32587
WordPress WP EasyPay plugin <= 4.2.11 - Broken Access Control vulnerability
CVE-2026-32527
WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.5 - Broken Access Control vulnerability
CVE-2026-32514
WordPress Petitioner plugin <= 0.7.3 - Broken Access Control vulnerability
CVE-2026-32495
WordPress WP Terms Popup plugin <= 2.10.0 - Broken Access Control vulnerability