← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
181 vulnerability records and advisories credit this contributor.
CVE-2026-65461
WordPress Really Simple CSV Importer plugin <= 1.3 - Arbitrary File Upload vulnerability
CVE-2026-59547
WordPress Payment Gateway for PayPal on WooCommerce plugin <= 9.1.4 - Broken Access Control vulnerability
CVE-2026-65539
WordPress Kwayy HTML Sitemap plugin <= 4.0 - CSRF to Stored XSS vulnerability
CVE-2026-65533
WordPress Smart SEO Tool plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65530
WordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability
CVE-2026-65527
WordPress LIQUID SPEECH BALLOON plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65519
WordPress Photo Gallery plugin <= 2.7.7.29 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65514
WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65496
WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-65474
WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability