← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
161 vulnerability records and advisories credit this contributor.
CVE-2026-65472
WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability
CVE-2026-65468
WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability
CVE-2026-65466
WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-65465
WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65462
WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability
CVE-2026-65460
WordPress Zarinpal Gateway plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-61973
WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability
CVE-2026-61972
WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability
CVE-2026-65550
WordPress Tabs plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65536
WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) plugin <= 4.4.5 - Cross Site Request Forgery (CSRF) vulnerability