← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-65557
WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65567
WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability
CVE-2026-66437
WordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-66475
WordPress Checkout Field Editor for WooCommerce – Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59539
WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-65558
WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-65568
WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability
CVE-2026-66438
WordPress Exclusive Addons Elementor plugin <= 2.8.0 - Sensitive Data Exposure vulnerability
CVE-2026-66476
WordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerability
CVE-2026-59546
WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability