← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-66639
WordPress WPZOOM Forms – Contact Form plugin for Gutenberg plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66636
WordPress Wise Chat plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-74009
WordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-74008
WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.22 - Sensitive Data Exposure vulnerability
CVE-2026-74007
WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery plugin <= 1.16.20 - Sensitive Data Exposure vulnerability
CVE-2026-74006
WordPress WP Table Builder plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-74004
WordPress Gravity Booster – Styles & Layouts for Gravity Forms plugin <= 6.0 - Broken Access Control vulnerability
CVE-2026-74003
WordPress RomethemeForm For Elementor plugin <= 1.2.6 - Broken Access Control vulnerability
CVE-2026-73994
WordPress Charitable plugin <= 1.8.11.3 - Broken Access Control vulnerability
CVE-2026-66646
WordPress WP Tab Widget plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability