← All credits
Ananda Dhakal | Patchstack
28 vulnerability records and advisories credit this contributor.
CVE-2026-94405
WordPress Download Manager plugin <= 3.3.71 - Sensitive Data Exposure vulnerability
CVE-2026-94180
WordPress Advanced Ads plugin <= 2.0.26 - Sensitive Data Exposure vulnerability
CVE-2026-104403
WordPress LearnPress plugin <= 4.4.9 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-97259
WordPress Pay with Vipps for WooCommerce plugin <= 6.2.4 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-62084
WordPress User Submitted Posts plugin <= 20260810 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96826
WordPress W4 Post List plugin <= 3.0.6 - SQL Injection vulnerability
CVE-2026-92465
WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerability
CVE-2026-94117
WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerability
CVE-2025-53341
WordPress Stratus theme <= 4.2.5 - Broken Access Control vulnerability
CVE-2026-81806
WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability