← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-66644
WordPress Typing Effect plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66640
WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66638
WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66637
WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66635
WordPress Slider by 10Web plugin <= 1.2.62 - CSRF to Arbitrary File Deletion vulnerability
CVE-2026-66620
WordPress OptionTree plugin <= 2.7.3 - PHP Object Injection vulnerability
CVE-2026-73346
WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability
CVE-2026-73344
WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66704
WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-66431
WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin <= 1.0.7 - Broken Access Control vulnerability