← All credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

249 vulnerability records and advisories credit this contributor.

CVE-2026-100512

WordPress Nested Pages plugin <= 3.3.2 - PHP Object Injection vulnerability

WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability

WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability

WordPress AllAble Connector plugin <= 0.13.4 - Broken Access Control vulnerability

WordPress WEBO MCP plugin <= 3.0.18 - Arbitrary File Deletion vulnerability

WordPress BackupEase plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability

WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability

WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability

WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.51 - PHP Object Injection vulnerability