← All credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

299 vulnerability records and advisories credit this contributor.

CVE-2026-97284
WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability
CVE-2026-97256
WordPress Page Builder by SiteOrigin plugin <= 2.36.0 - PHP Object Injection vulnerability
CVE-2026-97291
WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability
CVE-2026-100512
WordPress Nested Pages plugin <= 3.3.2 - PHP Object Injection vulnerability
CVE-2026-102377
WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability
CVE-2026-102392
WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability
CVE-2026-102384
WordPress Supreme Modules Lite plugin <= 2.5.63 - Cross Site Scripting (XSS) vulnerability
CVE-2026-100513
WordPress CF7 Views &#8211; Complete Entry Management for Contact Form 7 plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-100508
WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability
CVE-2026-97288
WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability