← All credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

299 vulnerability records and advisories credit this contributor.

CVE-2026-118073

WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability

CVE-2026-118074

WordPress Finale Lite plugin <= 2.21.0 - PHP Object Injection vulnerability

CVE-2026-118077

WordPress Sastra Essential Addons for Elementor plugin <= 1.2.3 - PHP Object Injection vulnerability

CVE-2026-118078

WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability

CVE-2026-118083

WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

CVE-2026-118084

WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability

WordPress Podamibe Custom User Gravatar plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

CVE-2026-108494

WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

CVE-2026-116868

WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability

CVE-2026-118076

WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerability