← All credits
Ananda Dhakal | Patchstack
28 vulnerability records and advisories credit this contributor.
CVE-2026-81806
WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-85306
WordPress MountDev AI MCP Connector for WordPress plugin <= 1.6.5 - Broken Access Control vulnerability
CVE-2026-85307
WordPress KP Agent Ready plugin < 1.2.08 - Sensitive Data Exposure vulnerability
CVE-2026-74010
WordPress bbPress plugin <= 2.6.14 - Broken Access Control vulnerability
CVE-2026-74011
WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability
CVE-2026-28144
WordPress WP Maps plugin <= 4.9.6 - Sensitive Data Exposure vulnerability
CVE-2026-57676
WordPress Simple User Avatar plugin <= 4.9 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-59519
WordPress FormLayer plugin <= 1.0.6 - Sensitive Data Exposure vulnerability
CVE-2026-59520
WordPress CrawlWP SEO plugin <= 3.0.16 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-59511
WordPress Exclusive Addons Elementor plugin <= 2.7.9.9 - Sensitive Data Exposure vulnerability