← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-78277
WordPress FluentCRM Pro plugin <= 3.1.12 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-78272
WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability
CVE-2026-78270
WordPress FluentCRM Pro plugin <= 3.1.12 - SQL Injection vulnerability
CVE-2026-66587
WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
CVE-2026-66585
WordPress WP Cafe Pro plugin < 3.0.15 - Sensitive Data Exposure vulnerability
CVE-2026-66586
WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
CVE-2026-68565
WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66645
WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66643
WordPress Wufoo Shortcode plugin <= 1.55 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66641
WordPress Video Conferencing with Zoom plugin <= 4.6.8 - Cross Site Scripting (XSS) vulnerability