← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-65561
WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66427
WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability
CVE-2026-66433
WordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65563
WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65562
WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66428
WordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-65434
WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability
CVE-2026-59548
WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability
CVE-2026-65506
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability
CVE-2026-65461
WordPress Really Simple CSV Importer plugin <= 1.3 - Arbitrary File Upload vulnerability