← All credits
Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
249 vulnerability records and advisories credit this contributor.
CVE-2026-96345
WordPress Estatik plugin <= 4.3.5 - SQL Injection vulnerability
CVE-2026-96344
WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability
CVE-2026-96343
WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability
CVE-2026-95531
WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability
CVE-2026-94683
WordPress DesignSetGo plugin <= 2.8.0 - PHP Object Injection vulnerability
CVE-2026-94678
WordPress Go Live Update Urls plugin <= 7.0.8 - PHP Object Injection vulnerability
CVE-2026-94677
WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability
CVE-2026-94672
WordPress Safe SVG plugin <= 2.5.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-94122
WordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerability
CVE-2026-94121
WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability