← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-39720
WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39765
WordPress Challan plugin <= 3.7.88 - Privilege Escalation vulnerability
CVE-2026-39772
WordPress Captcha by BestWebSoft plugin <= 5.2.8 - Bypass Vulnerability vulnerability
CVE-2026-39776
WordPress Tabs plugin <= 2.5 - Remote Code Execution (RCE) vulnerability
CVE-2026-39787
WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability
CVE-2026-39788
WordPress Front End PM plugin <= 11.4.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39791
WordPress Mailjet Email Marketing plugin <= 6.2.3 - Sensitive Data Exposure vulnerability
CVE-2026-41559
WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
CVE-2026-41560
WordPress WXD Backup Lite plugin <= 1.0.2 - Broken Access Control vulnerability
CVE-2026-41561
WordPress Museder RestoreOne plugin <= 2.7.276 - Sensitive Data Exposure vulnerability