← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-96827
WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability
CVE-2026-96824
WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability
CVE-2026-96825
WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability
CVE-2026-94672
WordPress Safe SVG plugin <= 2.5.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-93514
WordPress Notification for Telegram plugin <= 3.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62085
WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability
CVE-2026-95524
WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
CVE-2026-95603
WordPress Reycob Product Import Export plugin <= 2.3.0 - PHP Object Injection vulnerability
CVE-2026-95522
WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability
CVE-2026-94682
WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability