← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-118081
WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability
CVE-2026-42690
WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability
CVE-2026-54866
WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-116867
WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability
CVE-2026-118075
WordPress WP Media folders plugin <= 1.1.10 - PHP Object Injection vulnerability
CVE-2026-118080
WordPress Social Snap plugin <= 1.5.4 - PHP Object Injection vulnerability
CVE-2026-40808
WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability
CVE-2026-62130
WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability
CVE-2026-65459
WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability
CVE-2026-42419
WordPress Swish Migrate and Backup plugin <= 1.4.0 - Sensitive Data Exposure vulnerability