← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-24592
WordPress Auto Affiliate Links plugin <= 6.8.8.3 - Broken Access Control vulnerability
CVE-2026-24582
WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability
CVE-2026-24574
WordPress Export WP Page to Static HTML/CSS plugin <= 6.0.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-25424
WordPress Mediavine Control Panel plugin <= 2.10.10 - Broken Access Control vulnerability
CVE-2026-39593
WordPress HAPPY plugin <= 1.0.10 - Broken Access Control vulnerability
CVE-2026-65453
WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability
CVE-2026-61943
WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability
CVE-2026-25427
WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability
CVE-2026-39658
WordPress Panda Pods Repeater Field plugin <= 1.5.12 - Broken Access Control vulnerability
CVE-2026-57778
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerability