← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-65552
WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability
CVE-2026-66439
WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66685
WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability
CVE-2026-28179
WordPress FiboSearch plugin <= 1.33.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65553
WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability
CVE-2026-66678
WordPress Advanced Custom Fields: Font Awesome Field plugin <= 6.1.1 - Broken Access Control vulnerability
CVE-2026-66686
WordPress Plugins Garbage Collector (Database Cleanup) plugin <= 0.14 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-66703
WordPress MailOptin plugin <= 1.2.78.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65559
WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerability
CVE-2026-66712
WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability