Skip to content
Noroxi

Ananda Dhakal (Patchstack)

Patchstack Bug Bounty Program

517 credited records · 388 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Ananda Dhakal (Patchstack)

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-108175
    26Monitor

    WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploit

    pluginus.net · mdtfToday

  • CVE-2026-97278
    28Monitor

    WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    wp syntex · polylang1 day ago

  • CVE-2026-106599
    35Monitor

    WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    brainstorm force · surecart1 day ago

  • CVE-2026-108487
    26Monitor

    WordPress Books Gallery plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    hossni mubarak · books gallery2 days ago

  • CVE-2026-54870
    26Monitor

    WordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wpweaver · weaver xtreme theme support3 days ago

  • CVE-2026-54869
    26Monitor

    WordPress IMPress for IDX Broker plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    idx broker · impress for idx broker3 days ago

  • CVE-2026-54868
    26Monitor

    WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    foliovision · fv simpler seo3 days ago

  • CVE-2026-54867
    26Monitor

    WordPress Responsive Slider plugin <= 0.1.9 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    griden · responsive slider3 days ago

  • CVE-2026-42689
    14Monitor

    WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability

    LowCVSS 3.7No exploitEPSS 0%

    pixelite · events manager3 days ago

  • CVE-2026-107432
    21Monitor

    WordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nous ouvert utile et simple · event post3 days ago

  • CVE-2026-65459
    30Monitor

    WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    wpmu dev · forminator5 days ago

  • CVE-2026-62130
    28Monitor

    WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    amir helzer · woocommerce multilingual & multicurrency5 days ago

  • CVE-2026-45440
    30Monitor

    WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    smackcoders inc. · wp ultimate csv importer5 days ago

  • CVE-2026-42722
    30Monitor

    WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    shabti kaplan · frontend admin by dynamiapps5 days ago

  • CVE-2026-42717
    30Monitor

    WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    vaultdweller · leyka5 days ago

  • CVE-2026-42699
    28Monitor

    WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    foliovision · fv player 85 days ago

  • CVE-2026-42696
    40Plan

    WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability

    CriticalCVSS 10.0No exploitEPSS 0%

    royal plugins · sitevault – backup, restore, migration &amp; cloning5 days ago

  • CVE-2026-42630
    30Monitor

    WordPress Web Plura Backup & Restore Manager plugin <= 0.2.25 - Sensitive Data Exposure vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    web plura · web plura backup &amp; restore manager5 days ago

  • CVE-2026-42419
    23Monitor

    WordPress Swish Migrate and Backup plugin <= 1.4.0 - Sensitive Data Exposure vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    swishfolio · swish migrate and backup5 days ago

  • CVE-2026-40808
    26Monitor

    WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    automattic · jetpack videopress5 days ago

  • CVE-2026-106608
    28Monitor

    WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    automattic · woocommerce5 days ago

  • CVE-2026-94676
    28Monitor

    WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    tainacan community · tainacan5 days ago

  • CVE-2026-66435
    23Monitor

    WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data Exposure vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    devin walker · wp rollback5 days ago

  • CVE-2026-105885
    35Monitor

    WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    10web · slider by 10web5 days ago

  • CVE-2026-106606
    28Monitor

    WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    yith · yith woocommerce affiliates5 days ago