← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-74000
WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability
CVE-2026-66628
WordPress WP-Lister Lite for eBay plugin <= 3.8.11 - SQL Injection vulnerability
CVE-2026-66618
WordPress WP Maps plugin <= 4.9.9 - SQL Injection vulnerability
CVE-2026-66578
WordPress PropertyHive plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62109
WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability
CVE-2026-62137
WordPress bbPress plugin <= 2.6.14 - Sensitive Data Exposure vulnerability
CVE-2026-62112
WordPress Amelia plugin <= 2.4.9 - SQL Injection vulnerability
CVE-2026-62134
WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-62139
WordPress Site Kit by Google plugin <= 1.186.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-66674
WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Captcha Bypass vulnerability