← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-60175
WordPress PopAd Plugin <= 1.0.4 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-49906
WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability
CVE-2025-58222
WordPress Team Manager plugin <= 2.6.8 - Broken Access Control vulnerability
CVE-2025-57972
WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability
CVE-2025-57906
WordPress Epeken All Kurir plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-53460
WordPress AffiliateWP – External Referral Links Plugin <= 1.2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-69349
WordPress RSS Feed Widget plugin <= 3.0.2 - Broken Access Control vulnerability
CVE-2025-58011
WordPress Content Mask plugin <= 1.8.5.2 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-57979
WordPress AuthorSure Plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-57942
WordPress Emergency Password Reset plugin <= 9.3 - Cross Site Request Forgery (CSRF) vulnerability