← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
161 vulnerability records and advisories credit this contributor.
CVE-2026-57689
WordPress Werkstatt theme <= 4.7.2 - Broken Access Control vulnerability
CVE-2026-57623
WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability
CVE-2026-57685
WordPress Martfury - WooCommerce Marketplace WordPress theme theme <= 3.2.8 - Broken Access Control vulnerability
CVE-2026-57352
WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.0 - Broken Authentication vulnerability
CVE-2026-57684
WordPress TheFox theme <= 3.9.70 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57690
WordPress Werkstatt theme <= 4.7.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57335
WordPress Ads by WPQuads plugin <= 3.0.3 - Broken Access Control vulnerability
CVE-2026-57649
WordPress Shoppable Images Lite plugin <= 1.3 - Broken Access Control vulnerability
CVE-2026-57655
WordPress Child theme Wizard plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57651
WordPress Ghost Kit plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability