← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-66619
WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability
CVE-2026-62104
WordPress Migratico Lite plugin <= 2.6.8 - Remote Code Execution (RCE) vulnerability
CVE-2026-74000
WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability
CVE-2026-66631
WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability
CVE-2026-66628
WordPress WP-Lister Lite for eBay plugin <= 3.8.11 - SQL Injection vulnerability
CVE-2026-66625
WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability
CVE-2026-66624
WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability
CVE-2026-66618
WordPress WP Maps plugin <= 4.9.9 - SQL Injection vulnerability
CVE-2026-66578
WordPress PropertyHive plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62137
WordPress bbPress plugin <= 2.6.14 - Sensitive Data Exposure vulnerability