← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-58221
WordPress PilotPress Plugin <= 2.0.36 - Broken Access Control Vulnerability
CVE-2025-58200
WordPress Flexible FAQ Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58199
WordPress Fastly plugin <= 1.2.28 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-58033
WordPress Draft Plugin <= 3.0.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58032
WordPress WP Compiler Plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58029
WordPress Classic Widgets with Block-based Widgets Plugin <= 1.0.1 - Broken Access Control Vulnerability
CVE-2025-58012
WordPress Content Mask plugin <= 1.8.5.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-58010
WordPress SV Proven Expert Plugin <= 2.0.06 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-58009
WordPress CP Multi View Event Calendar plugin <= 1.4.35 - Broken Access Control vulnerability
CVE-2025-58000
WordPress Memberful plugin <= 1.75.0 - Broken Access Control vulnerability