← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-66641
WordPress Video Conferencing with Zoom plugin <= 4.6.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66643
WordPress Wufoo Shortcode plugin <= 1.55 - Cross Site Scripting (XSS) vulnerability
CVE-2026-74007
WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery plugin <= 1.16.20 - Sensitive Data Exposure vulnerability
CVE-2026-74004
WordPress Gravity Booster – Styles & Layouts for Gravity Forms plugin <= 6.0 - Broken Access Control vulnerability
CVE-2026-73994
WordPress Charitable plugin <= 1.8.11.3 - Broken Access Control vulnerability
CVE-2026-68565
WordPress GeoDirectory plugin <= 2.8.172 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66645
WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66639
WordPress WPZOOM Forms – Contact Form plugin for Gutenberg plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66704
WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-73346
WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability