← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-66712
WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability
CVE-2026-66681
WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-65559
WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerability
CVE-2026-66706
WordPress Subscribe to Comments plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66703
WordPress MailOptin plugin <= 1.2.78.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66701
WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability
CVE-2026-66699
WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerability
CVE-2026-66686
WordPress Plugins Garbage Collector (Database Cleanup) plugin <= 0.14 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-66685
WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability
CVE-2026-66684
WordPress Export Import Menus plugin <= 1.9.2 - Sensitive Data Exposure vulnerability