← All credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

198 vulnerability records and advisories credit this contributor.

WordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerability

WordPress Checkout Field Editor for WooCommerce – Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

WordPress Exclusive Addons Elementor plugin <= 2.8.0 - Sensitive Data Exposure vulnerability

WordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerability

WordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

WordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerability

WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability

WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability

WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability

WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability