← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
299 vulnerability records and advisories credit this contributor.
CVE-2026-41562
WordPress Norvis Backup plugin <= 1.1.0 - Sensitive Data Exposure vulnerability
CVE-2026-42413
WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin <= 1.3.2 - Sensitive Data Exposure vulnerability
CVE-2026-97308
WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability
CVE-2026-104757
WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability
CVE-2026-105071
WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability
CVE-2026-62073
WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability
CVE-2026-97258
WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability
CVE-2026-103068
WordPress ByteCoreStack – MCP Connector for AI Tools plugin <= 1.2.2 - Privilege Escalation vulnerability
CVE-2026-94390
WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability
CVE-2026-97260
WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability