← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-24532
WordPress SiteLock Security plugin <= 5.0.2 - Broken Access Control vulnerability
CVE-2026-24525
WordPress CLP Varnish Cache plugin <= 1.0.2 - Broken Access Control vulnerability
CVE-2026-24524
WordPress Tablesome plugin <= 1.2.8 - Broken Access Control vulnerability
CVE-2026-24523
WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability
CVE-2026-24522
WordPress WP Subscribe plugin <= 1.2.16 - Broken Access Control vulnerability
CVE-2026-24521
WordPress Kama Thumbnail plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-24388
WordPress WPMasterToolKit plugin <= 2.14.0 - Broken Access Control vulnerability
CVE-2026-24387
WordPress WP Quick Post Duplicator plugin <= 2.1 - Broken Access Control vulnerability
CVE-2026-24386
WordPress Element Invader – Template Kits for Elementor plugin <= 1.2.4 - Broken Access Control vulnerability
CVE-2026-24379
WordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability