← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-66476
WordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerability
CVE-2026-59546
WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability
CVE-2026-65561
WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66427
WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability
CVE-2026-66433
WordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65563
WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65562
WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66428
WordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-65434
WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability
CVE-2026-59548
WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability