← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-58977
WordPress WP eBay Product Feeds Plugin <= 3.4.8 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-58969
WordPress Custom Login URL Plugin <= 1.0.2 - Broken Access Control Vulnerability
CVE-2025-58821
WordPress WP Notification Bell plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-58820
WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58819
WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability
CVE-2025-58818
WordPress Developer Tools Blocker Plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58634
WordPress PeachPay Payments Plugin <= 1.117.4 - Broken Access Control Vulnerability
CVE-2025-58617
WordPress F4 Media Taxonomies Plugin <= 1.1.4 - Broken Access Control Vulnerability
CVE-2025-58615
WordPress WP Bannerize Pro Plugin <= 1.10.0 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-58236
WordPress Force Update Translations plugin <= 0.5 - Cross Site Request Forgery (CSRF) vulnerability