← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-97243
WordPress AllAble Connector plugin <= 0.13.4 - Broken Access Control vulnerability
CVE-2026-96349
WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability
CVE-2026-96348
WordPress Bookly plugin <= 28.2 - Broken Access Control vulnerability
CVE-2026-96347
WordPress Bookly plugin <= 28.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-96346
WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability
CVE-2026-94122
WordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerability
CVE-2026-94121
WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability
CVE-2026-94115
WordPress Easy Pricing Tables plugin <= 4.1.2 - SQL Injection vulnerability
CVE-2026-94082
WordPress Quiz Cat plugin <= 3.1.1 - SQL Injection vulnerability
CVE-2026-97066
WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability