← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-57994
WordPress Upcoming Events Lists Plugin <= 1.4.0 - Insecure Direct Object References (IDOR) Vulnerability
CVE-2025-57992
WordPress Mail Baby SMTP plugin <= 2.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-57991
WordPress Clariti Plugin <= 1.2.1 - Broken Access Control Vulnerability
CVE-2025-57985
WordPress Ultimate Watermark Plugin <= 1.1 - Broken Access Control Vulnerability
CVE-2025-57984
WordPress MakeStories (for Google Web Stories) Plugin <= 3.0.4 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-57983
WordPress BP Disable Activation Reloaded Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-57982
WordPress Advance Portfolio Grid plugin <= 1.07.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-57980
WordPress Safety Exit Plugin <= 1.8.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-57978
WordPress Advanced Appointment Booking & Scheduling plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-57971
WordPress SALESmanago Plugin <= 3.8.1 - Broken Access Control Vulnerability