← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-22466
WordPress WP MapIt plugin <= 3.0.3 - Broken Access Control vulnerability
CVE-2026-22463
WordPress Form to Chat App plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-22462
WordPress Add Polylang support for Customizer plugin <= 1.4.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-22459
WordPress WordPress CTA plugin <= 2.1.2 - Broken Access Control vulnerability
CVE-2026-22348
WordPress Civic Cookie Control plugin <= 1.53 - Broken Access Control vulnerability
CVE-2026-0674
WordPress Campaign Monitor for WordPress plugin <= 2.9.1 - Broken Access Control vulnerability
CVE-2025-69388
WordPress Cliengo – Chatbot plugin <= 3.0.4 - Broken Access Control vulnerability
CVE-2025-69355
WordPress Tickera plugin <= 3.5.6.4 - Broken Access Control vulnerability
CVE-2025-68604
WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-68577
WordPress Virusdie plugin <= 1.1.6 - Broken Access Control vulnerability