← All credits
Ananda Dhakal | Patchstack
23 vulnerability records and advisories credit this contributor.
CVE-2026-28144
WordPress WP Maps plugin <= 4.9.6 - Sensitive Data Exposure vulnerability
CVE-2026-57676
WordPress Simple User Avatar plugin <= 4.9 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-59519
WordPress FormLayer plugin <= 1.0.6 - Sensitive Data Exposure vulnerability
CVE-2026-59520
WordPress CrawlWP SEO plugin <= 3.0.16 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-59511
WordPress Exclusive Addons Elementor plugin <= 2.7.9.9 - Sensitive Data Exposure vulnerability
CVE-2026-57722
WordPress Enable Media Replace plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-56052
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability
CVE-2026-56007
WordPress Ocean Product Sharing plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-56009
WordPress Bricksable for Bricks Builder plugin <= 1.6.83 - Cross Site Scripting (XSS) vulnerability
CVE-2026-49064
WordPress GetPaid plugin <= 2.8.49 - Sensitive Data Exposure vulnerability