← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-32362
WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2026-32357
WordPress Simple Blog Card plugin <= 2.37 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-32348
WordPress MAS Videos plugin <= 1.3.2 - Broken Access Control vulnerability
CVE-2026-32331
WordPress Textmetrics plugin <= 3.6.4 - Broken Access Control vulnerability
CVE-2026-27090
WordPress Kenta Companion plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-25462
WordPress avalex plugin <= 3.1.3 - Broken Access Control vulnerability
CVE-2026-25430
WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2026-25429
WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Injection vulnerability
CVE-2026-25423
WordPress Real 3D FlipBook plugin <= 4.19.1 - Broken Access Control vulnerability
CVE-2026-25411
WordPress Revision Manager TMC plugin <= 2.8.22 - Cross Site Request Forgery (CSRF) vulnerability