← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-95593
WordPress Ultimeter plugin <= 3.0.8 - SQL Injection vulnerability
CVE-2026-95525
WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability
CVE-2026-66626
WordPress SKT Addons for Elementor plugin <= 4.0 - SQL Injection vulnerability
CVE-2026-74002
WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability
CVE-2026-66630
WordPress PublishPress Series plugin <= 3.1.3 - SQL Injection vulnerability
CVE-2026-66619
WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability
CVE-2026-62104
WordPress Migratico Lite plugin <= 2.6.8 - Remote Code Execution (RCE) vulnerability
CVE-2026-66624
WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability
CVE-2026-66631
WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability
CVE-2026-66625
WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability