← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-78277
WordPress FluentCRM Pro plugin <= 3.1.12 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-78278
WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-78279
WordPress Fluent Support Pro plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-66585
WordPress WP Cafe Pro plugin < 3.0.15 - Sensitive Data Exposure vulnerability
CVE-2026-66587
WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
CVE-2026-66586
WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
CVE-2026-66620
WordPress OptionTree plugin <= 2.7.3 - PHP Object Injection vulnerability
CVE-2026-66635
WordPress Slider by 10Web plugin <= 1.2.62 - CSRF to Arbitrary File Deletion vulnerability
CVE-2026-66638
WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66640
WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability