← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
249 vulnerability records and advisories credit this contributor.
CVE-2026-93514
WordPress Notification for Telegram plugin <= 3.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62085
WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability
CVE-2026-95524
WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
CVE-2026-95603
WordPress Reycob Product Import Export plugin <= 2.3.0 - PHP Object Injection vulnerability
CVE-2026-95522
WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability
CVE-2026-94682
WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94179
WordPress Razorpay Payment Button plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-93529
WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability
CVE-2026-93622
WordPress WPS Limit Login plugin <= 1.5.9.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94079
WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability