← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-65462
WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability
CVE-2026-65468
WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability
CVE-2026-65474
WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability
CVE-2026-65519
WordPress Photo Gallery plugin <= 2.7.7.29 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65527
WordPress LIQUID SPEECH BALLOON plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65533
WordPress Smart SEO Tool plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65539
WordPress Kwayy HTML Sitemap plugin <= 4.0 - CSRF to Stored XSS vulnerability
CVE-2026-61972
WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability
CVE-2026-65465
WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65472
WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability