← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
161 vulnerability records and advisories credit this contributor.
CVE-2026-57657
WordPress Gmail SMTP plugin <= 1.2.3.19 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57637
WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57656
WordPress Hester Core plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57628
WordPress WP All Import plugin <= 4.0.1 - SQL Injection vulnerability
CVE-2026-57634
WordPress PPWP plugin <= 1.9.19 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-54833
WordPress Enable CORS plugin <= 2.0.3 - Backdoor vulnerability
CVE-2026-56066
WordPress ShortPixel Adaptive Images plugin <= 3.11.4 - Arbitrary File Deletion vulnerability
CVE-2026-57318
WordPress Site Reviews plugin <= 8.0.11 - Sensitive Data Exposure vulnerability
CVE-2026-57627
WordPress Kirki plugin <= 6.0.11 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-57633
WordPress WCBoost – Products Compare plugin <= 1.1.0 - Sensitive Data Exposure vulnerability