← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-65466
WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-65460
WordPress Zarinpal Gateway plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-61973
WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability
CVE-2026-65530
WordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability
CVE-2026-65514
WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65536
WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) plugin <= 4.4.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-61954
WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability
CVE-2026-65457
WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability
CVE-2026-65470
WordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65529
WordPress Graphina plugin <= 3.1.12 - Broken Access Control vulnerability