← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-32387
WordPress Checkout for PayPal plugin <= 1.0.46 - Broken Access Control vulnerability
CVE-2026-32368
WordPress Geo to Lat plugin <= 1.0.19 - SQL Injection vulnerability
CVE-2026-32367
WordPress Modal Dialog plugin <= 3.5.16 - Remote Code Execution (RCE) vulnerability
CVE-2026-32362
WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2026-32357
WordPress Simple Blog Card plugin <= 2.37 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-32348
WordPress MAS Videos plugin <= 1.3.2 - Broken Access Control vulnerability
CVE-2026-32331
WordPress Textmetrics plugin <= 3.6.4 - Broken Access Control vulnerability
CVE-2026-27090
WordPress Kenta Companion plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-25462
WordPress avalex plugin <= 3.1.3 - Broken Access Control vulnerability
CVE-2026-25430
WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.2.2 - Broken Access Control vulnerability