← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-24584
WordPress Tutor LMS BunnyNet Integration plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24579
WordPress Ai Image Alt Text Generator for WP plugin <= 1.1.9 - Broken Access Control vulnerability
CVE-2026-24571
WordPress BOX NOW Delivery plugin <= 3.0.2 - Broken Access Control vulnerability
CVE-2026-24570
WordPress Edwiser Bridge plugin <= 4.3.2 - Broken Access Control vulnerability
CVE-2026-24569
WordPress Media Library File Size plugin <= 1.6.7 - Broken Access Control vulnerability
CVE-2026-24568
WordPress WP Travel plugin <= 11.1.0 - Broken Access Control vulnerability
CVE-2026-24567
WordPress Anything Order by Terms plugin <= 1.4.0 - Broken Access Control vulnerability
CVE-2026-24561
WordPress FluentBoards plugin <= 1.91.1 - Broken Access Control vulnerability
CVE-2026-24560
WordPress Cloudinary plugin <= 3.3.2 - Broken Access Control vulnerability
CVE-2026-24559
WordPress Integration for Contact Form 7 HubSpot plugin <= 1.4.3 - Sensitive Data Exposure vulnerability