← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-66586
WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
CVE-2026-66620
WordPress OptionTree plugin <= 2.7.3 - PHP Object Injection vulnerability
CVE-2026-66638
WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66640
WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66644
WordPress Typing Effect plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66646
WordPress WP Tab Widget plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-74003
WordPress RomethemeForm For Elementor plugin <= 1.2.6 - Broken Access Control vulnerability
CVE-2026-74006
WordPress WP Table Builder plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-74009
WordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-66637
WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability