← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2025-46485
WordPress WP Customize Login Page plugin <= 1.6.5 - Broken Access Control Vulnerability
CVE-2025-46477
WordPress WP Customize Login Page plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46469
WordPress Send From plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46459
WordPress Confirm User Registration plugin <= 2.1.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46451
WordPress Floating Social Bar plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-46442
WordPress Loan Calculator plugin <= 1.3 - CSRF to Stored XSS vulnerability
CVE-2025-46229
WordPress Textmetrics plugin <= 3.6.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-43835
WordPress wp-cyr-cho plugin <= 0.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-43834
WordPress cookieBAR plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-39546
WordPress ElementsReady Addons for Elementor plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) Vulnerability