← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-95603
WordPress Reycob Product Import Export plugin <= 2.3.0 - PHP Object Injection vulnerability
CVE-2026-95524
WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
CVE-2026-95522
WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability
CVE-2026-94682
WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94179
WordPress Razorpay Payment Button plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-93529
WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability
CVE-2026-95593
WordPress Ultimeter plugin <= 3.0.8 - SQL Injection vulnerability
CVE-2026-95525
WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability
CVE-2026-95523
WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
CVE-2026-94684
WordPress Ocean Extra plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability