← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-50022
WordPress WP-FB-AutoConnect plugin <= 4.6.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50021
WordPress Better Random Redirect plugin <= 1.3.20 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50020
WordPress RDFa Breadcrumb plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50019
WordPress Simple Sticky Footer plugin <= 1.3.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50018
WordPress Tealium plugin <= 2.1.20 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49910
WordPress WPGuppy plugin <= 1.1.4 - Broken Access Control vulnerability
CVE-2025-49902
WordPress Login Page Customizer – Customizer Login Page, Admin Page, Custom Design plugin <= 2.1.1 - Broken Access Control vulnerability
CVE-2025-49864
WordPress AFS Analytics plugin <= 4.21 - Broken Access Control Vulnerability
CVE-2025-49412
WordPress Page Transition plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49392
WordPress Themify Audio Dock Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability