← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-24386
WordPress Element Invader – Template Kits for Elementor plugin <= 1.2.4 - Broken Access Control vulnerability
CVE-2026-24379
WordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-24377
WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerability
CVE-2026-24376
WordPress WPVulnerability plugin <= 4.2.1 - Broken Access Control vulnerability
CVE-2026-23805
WordPress Media Search Enhanced plugin <= 0.9.1 - SQL Injection vulnerability
CVE-2026-22490
WordPress Bulk Landing Page Creator for WordPress LPagery plugin <= 2.4.9 - Broken Access Control vulnerability
CVE-2026-22489
WordPress Image Slider Slideshow plugin <= 1.8 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-22488
WordPress Dashboard Welcome for Beaver Builder plugin <= 1.0.8 - Broken Access Control vulnerability
CVE-2026-22487
WordPress Speed Kit plugin <= 2.0.2 - Broken Access Control vulnerability
CVE-2026-22483
WordPress teachPress plugin <= 9.0.12 - Cross Site Request Forgery (CSRF) vulnerability