← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
249 vulnerability records and advisories credit this contributor.
CVE-2026-65563
WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65562
WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65561
WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65558
WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-65557
WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65434
WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability
CVE-2026-59548
WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability
CVE-2026-59546
WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability
CVE-2026-59539
WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-65538
WordPress Machete plugin <= 5.2 - Cross Site Scripting (XSS) vulnerability