← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-65465
WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65472
WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability
CVE-2026-65466
WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-65460
WordPress Zarinpal Gateway plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-61973
WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability
CVE-2026-65530
WordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability
CVE-2026-65514
WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65536
WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) plugin <= 4.4.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-61954
WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability
CVE-2026-65457
WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability