← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
198 vulnerability records and advisories credit this contributor.
CVE-2026-28140
WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability
CVE-2026-65498
WordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability
CVE-2026-65458
WordPress Polylang and Polylang Pro plugins <= 3.8.5 - Sensitive Data Exposure vulnerability
CVE-2026-65446
WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65445
WordPress Ad Invalid Click Protector (AICP) plugin <= 1.3.0 - Broken Access Control vulnerability
CVE-2026-66474
WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-66434
WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.33 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65564
WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability
CVE-2026-65436
WordPress Kirki plugin <= 6.0.13 - Arbitrary File Deletion vulnerability
CVE-2026-59537
WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.10.22 - SQL Injection vulnerability