← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
273 vulnerability records and advisories credit this contributor.
CVE-2026-40808
WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability
CVE-2026-62130
WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability
CVE-2026-65459
WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability
CVE-2026-42419
WordPress Swish Migrate and Backup plugin <= 1.4.0 - Sensitive Data Exposure vulnerability
CVE-2026-42630
WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Data Exposure vulnerability
CVE-2026-42717
WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability
CVE-2026-42722
WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability
CVE-2026-45440
WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability
CVE-2026-42699
WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105072
WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability