← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-42630
WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Data Exposure vulnerability
CVE-2026-42717
WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability
CVE-2026-42722
WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability
CVE-2026-45440
WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability
CVE-2026-42699
WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105072
WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability
CVE-2026-39599
WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability
CVE-2026-39789
WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability
CVE-2026-41558
WordPress WP Migration Plugin DB & Files – WP Synchro plugin <= 1.16.1 - 2FA Bypass vulnerability
CVE-2026-41563
WordPress Sitemovr plugin <= 1.0.1 - Sensitive Data Exposure vulnerability