← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-57352
WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.0 - Broken Authentication vulnerability
CVE-2026-57684
WordPress TheFox theme <= 3.9.70 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57690
WordPress Werkstatt theme <= 4.7.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57335
WordPress Ads by WPQuads plugin <= 3.0.3 - Broken Access Control vulnerability
CVE-2026-57649
WordPress Shoppable Images Lite plugin <= 1.3 - Broken Access Control vulnerability
CVE-2026-57655
WordPress Child theme Wizard plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57651
WordPress Ghost Kit plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57657
WordPress Gmail SMTP plugin <= 1.2.3.19 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57637
WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57656
WordPress Hester Core plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability