← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-62109
WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability
CVE-2026-62139
WordPress Site Kit by Google plugin <= 1.186.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-62134
WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-62112
WordPress Amelia plugin <= 2.4.9 - SQL Injection vulnerability
CVE-2026-81804
WordPress ZHBackup – Backup, Restore & Migration plugin <= 2.4.2 - Sensitive Data Exposure vulnerability
CVE-2026-66674
WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Captcha Bypass vulnerability
CVE-2026-81805
WordPress SiteSkite plugin <= 2.1.5 - Privilege Escalation vulnerability
CVE-2026-84778
WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability
CVE-2026-84766
WordPress FluentBooking Pro plugin <= 2.2.1 - Bypass Vulnerability vulnerability
CVE-2026-84776
WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability