← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-93773
WordPress Mollie Forms plugin <= 2.11.0 - SQL Injection vulnerability
CVE-2026-94124
WordPress WP EasyCart plugin <= 5.9.4 - SQL Injection vulnerability
CVE-2026-94391
WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94684
WordPress Ocean Extra plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-95523
WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
CVE-2026-95593
WordPress Ultimeter plugin <= 3.0.8 - SQL Injection vulnerability
CVE-2026-95525
WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability
CVE-2026-66626
WordPress SKT Addons for Elementor plugin <= 4.0 - SQL Injection vulnerability
CVE-2026-74002
WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability
CVE-2026-66630
WordPress PublishPress Series plugin <= 3.1.3 - SQL Injection vulnerability