← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-78527
WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability
CVE-2026-90888
WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerability
CVE-2026-118089
WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability
CVE-2026-42701
WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability
CVE-2026-54864
WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62131
WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability
CVE-2026-116864
WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerability
CVE-2026-116865
WordPress Zippy plugin <= 1.7.0 - PHP Object Injection vulnerability
CVE-2026-116866
WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerability
CVE-2026-116869
WordPress myPOS Checkout plugin <= 1.4.5 - PHP Object Injection vulnerability