← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-84779
WordPress Agentimus – AI SEO, llms.txt & MCP for AI Agents plugin <= 1.51.0 - Broken Access Control vulnerability
CVE-2026-84777
WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability
CVE-2026-84772
WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-84775
WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability
CVE-2026-83562
WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-82229
WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-82228
WordPress SiteGround Security plugin <= 1.6.6 - 2FA Bypass vulnerability
CVE-2026-81297
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerability
CVE-2026-81296
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Broken Access Control vulnerability
CVE-2026-81757
WordPress Rank Math SEO plugin <= 1.0.276 - Remote Code Execution (RCE) vulnerability