← All credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

198 vulnerability records and advisories credit this contributor.

WordPress Custom CSS and JavaScript plugin <= 2.0.16 - Sensitive Data Exposure vulnerability

WordPress Advanced Custom Fields: Font Awesome Field plugin <= 6.1.1 - Broken Access Control vulnerability

WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability

WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerability

WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability

WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability

WordPress Easy PayPal Buy Now Button plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

WordPress Mercado Pago payments for WooCommerce plugin <= 8.9.0 - Insecure Direct Object References (IDOR) vulnerability

WordPress FiboSearch plugin <= 1.33.0 - Cross Site Scripting (XSS) vulnerability

WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability