← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-94391
WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94174
WordPress Email Log plugin <= 2.63 - SQL Injection vulnerability
CVE-2026-94124
WordPress WP EasyCart plugin <= 5.9.4 - SQL Injection vulnerability
CVE-2026-94079
WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability
CVE-2026-93773
WordPress Mollie Forms plugin <= 2.11.0 - SQL Injection vulnerability
CVE-2026-93622
WordPress WPS Limit Login plugin <= 1.5.9.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-93527
WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability
CVE-2026-66626
WordPress SKT Addons for Elementor plugin <= 4.0 - SQL Injection vulnerability
CVE-2026-74002
WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability
CVE-2026-66630
WordPress PublishPress Series plugin <= 3.1.3 - SQL Injection vulnerability