← All credits
Ananda Dhakal (Patchstack)
263 vulnerability records and advisories credit this contributor.
CVE-2026-116409
WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-118079
WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerability
CVE-2026-116392
WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability
CVE-2026-116391
WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability
CVE-2026-115590
WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability
CVE-2026-116389
WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability
CVE-2026-116390
WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerability
CVE-2026-115968
WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability
CVE-2025-26926
WordPress Booknetic plugin < 5.10.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-116403
WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability