← All credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

198 vulnerability records and advisories credit this contributor.

CVE-2026-57628
WordPress WP All Import plugin <= 4.0.1 - SQL Injection vulnerability
CVE-2026-57634
WordPress PPWP plugin <= 1.9.19 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-54833
WordPress Enable CORS plugin <= 2.0.3 - Backdoor vulnerability
CVE-2026-56066
WordPress ShortPixel Adaptive Images plugin <= 3.11.4 - Arbitrary File Deletion vulnerability
CVE-2026-57318
WordPress Site Reviews plugin <= 8.0.11 - Sensitive Data Exposure vulnerability
CVE-2026-57627
WordPress Kirki plugin <= 6.0.11 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-57633
WordPress WCBoost &#8211; Products Compare plugin <= 1.1.0 - Sensitive Data Exposure vulnerability
CVE-2026-57658
WordPress TemplateSpare plugin <= 4.2.0 - Arbitrary File Upload vulnerability