Ananda Dhakal (Patchstack)

Say thanks

7,226.71

XP

614

Reports

45

Reports, last 90 days

-

25 Oct, 2026
🇳🇵
Lvl 8
0
0
0
0
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
Relevanssi <= 4.28.4
PHP Object Injection
N/A
7.2
17/09/2026
Extensions for Leaflet Map<= 6.0
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
ND Shortcodes For Visual Composer<= 7.8
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
Waitlist Woocommerce ( Back in stock notifier )<= 2.9.1
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
Restaurant Menu – Food Ordering System – Table Reservation<= 2.4.4
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
LiteSpeed Cache<= 7.9
Sensitive Data Exposure
135.7
5.9
18/08/2026
Newsletters<= 4.18.1
PHP Object Injection
4.9
9.8
17/09/2026
LearnPress<= 4.4.10
Broken Access Control
16.2
5.4
03/09/2026
WordPress Team Members – GS Plugins<= 2.8.2
PHP Object Injection
N/A
8.8
17/09/2026
GS Pins for Pinterest<= 1.9.2
PHP Object Injection
N/A
8.8
17/09/2026
MDTF<= 1.4.0
Cross Site Scripting (XSS)
1.4
6.5
24/09/2026
PAYCOMET for WooCommerce<= 5.45
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
YayMail<= 4.4.6
PHP Object Injection
N/A
7.2
17/09/2026
Books Gallery<= 4.8.4
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
FV Simpler SEO<= 1.9.7
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Chained Quiz<= 1.4.1
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Post Video Players<= 1.165
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Podamibe Custom User Gravatar<= 1.0.8
Cross Site Scripting (XSS)
1.63
6.5
11/09/2026
Razorpay Payment Button Elementor Plugin<= 1.2.8
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Responsive Slider<= 0.1.9
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
FV Simpler SEO<= 1.9.7
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
IMPress for IDX Broker<= 3.3.1
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
Weaver Xtreme Theme Support<= 7.1
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
Events Manager<= 7.4.8
Race Condition
2.22
3.7
03/09/2026
SureCart<= 4.9.3
PHP Object Injection
N/A
8.8
17/09/2026
Polylang<= 3.8.9
PHP Object Injection
N/A
7.2
17/09/2026
Event post<= 6.1.1
Broken Access Control
N/A
5.4
23/09/2026
Html5 Audio Player<= 2.8.8
Cross Site Scripting (XSS)
5.61
6.5
13/07/2026
WooCommerce Multilingual & Multicurrency<= 5.5.8
PHP Object Injection
N/A
7.2
17/09/2026
WooCommerce9.8.0-11.1.2
Privilege Escalation
N/A
7.2
25/08/2026
Jetpack VideoPress<= 3.6
Broken Access Control
4.88
6.5
20/08/2026
WP Rollback<= 3.1.2
Sensitive Data Exposure
59
5.9
25/08/2026
Forminator<= 1.57.3
Arbitrary Content Deletion
103.5
7.5
03/09/2026
Tutor LMS<= 4.1.3
Race Condition
2.12
5.3
03/09/2026
Tainacan<= 1.3.0
PHP Object Injection
N/A
7.2
17/09/2026
Slider by 10Web<= 1.2.62
PHP Object Injection
N/A
8.8
17/09/2026
Robo Gallery<= 5.1.6
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
YITH WooCommerce Affiliates<= 3.31.0
PHP Object Injection
N/A
7.2
17/09/2026
WP Ultimate CSV Importer<= 9.2
SQL Injection
N/A
7.6
08/09/2026
WP Post Author<= 4.0.0
SQL Injection
N/A
7.6
08/09/2026
Slider by 10Web<= 1.2.63
SQL Injection
N/A
7.6
08/09/2026
Jetpack<= 16.2
Broken Authentication
86.4
5.4
20/08/2026
Jetpack<= 16.2
Broken Authentication
76.8
4.8
20/08/2026
Quiz And Survey Master<= 11.2.7
PHP Object Injection
7.59
8.8
17/09/2026
WP Associate Post R2<= 5.0.1
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Product Configurator for WooCommerce<= 1.7.5
PHP Object Injection
N/A
7.2
17/09/2026
QA Analytics<= 5.3.0.0
Sensitive Data Exposure
3.45
6.9
23/09/2026
Post title marquee scroll<= 9.9
SQL Injection
N/A
7.6
08/09/2026
Pix por Piggly (para Woocommerce)<= 2.1.2
SQL Injection
N/A
7.6
08/09/2026
Leyka<= 3.32.3
SQL Injection
N/A
7.6
08/09/2026
Dynamic User Directory<= 2.4
SQL Injection
N/A
7.6
08/09/2026
affiliate-toolkit<= 3.9.1
SQL Injection
N/A
7.6
08/09/2026
Frontend Admin by DynamiApps<= 3.29.13
SQL Injection
N/A
7.6
08/09/2026
WordPress<= 7.1.2
Sensitive Data Exposure
276
6.9
21/09/2026
SiteVault – Backup, Restore, Migration &amp; Cloning<= 1.5.19
Remote Code Execution (RCE)
N/A
10
28/08/2026
Swish Migrate and Backup<= 1.4.0
Sensitive Data Exposure
N/A
5.9
28/08/2026
Web Plura Backup &amp; Restore Manager<= 0.2.27
Sensitive Data Exposure
N/A
7.5
28/08/2026
FV Player 8<= 8.1.8
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Image Slider Widget<= 1.1.130
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
10Web Social Photo Feed<= 1.4.35
Broken Access Control
13
6.5
08/07/2026
Front End PM<= 11.4.6
Cross Site Scripting (XSS)
4.88
6.5
09/07/2026
Mailjet Email Marketing<= 6.2.3
Sensitive Data Exposure
15
5.3
09/07/2026
Captcha by BestWebSoft<= 5.2.8
Bypass Vulnerability
N/A
5.3
15/06/2026
Tabs<= 2.5
Remote Code Execution (RCE)
N/A
8
24/06/2026
Graphina – Charts and Graphs For Elementor<= 3.1.12
Broken Authentication
15
7.5
10/06/2026
Challan<= 3.7.91
Privilege Escalation
N/A
7.2
04/06/2026
Easy Digital Downloads<= 3.7.1
Broken Access Control
30
7.5
03/09/2026
WP Migration Plugin DB & Files – WP Synchro<= 1.16.1
Bypass Vulnerability
3.75
7.5
28/08/2026
SafeSnap – Verified WordPress Backup &amp; Restore<= 2.1.2
Sensitive Data Exposure
N/A
7.5
28/08/2026
WXD Backup Lite<= 1.0.2
Broken Access Control
N/A
7.5
28/08/2026
Museder RestoreOne<= 2.7.276
Sensitive Data Exposure
N/A
7.5
28/08/2026
Norvis Backup<= 1.1.0
Sensitive Data Exposure
N/A
7.5
28/08/2026
Sitemovr<= 1.0.1
Sensitive Data Exposure
N/A
7.5
28/08/2026
Snapshotify &#8211; All-in-One Backup &amp; Restore &amp; Migrate<= 1.3.6
Sensitive Data Exposure
N/A
7.5
28/08/2026
FluentBooking Pro< 2.5.0
Broken Access Control
N/A
7.5
13/08/2026
Fluent Affiliate Pro<= 1.6.4
Broken Access Control
N/A
7.5
13/08/2026
Mapster WP Maps<= 2.0.4
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Polylang<= 3.8.7
Sensitive Data Exposure
25.96
4.3
25/08/2026
Motors<= 1.4.124
Sensitive Data Exposure
11.9
6.9
23/09/2026
Login Lockdown<= 2.17
Bypass Vulnerability
51.52
4.8
25/08/2026
Import and export users and customers<= 2.5.5
Privilege Escalation
N/A
7.2
28/08/2026
SiteVault – Backup, Restore, Migration &amp; Cloning<= 1.5.17
Sensitive Data Exposure
N/A
7.5
28/08/2026
Logo Showcase<= 4.0.4
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
MP3 Audio Player for Music, Radio & Podcast by Sonaar<= 5.14.2
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
eCommerce Product Catalog<= 3.6.2
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
Video Conferencing with Zoom<= 4.6.10
Sensitive Data Exposure
5.3
5.3
23/09/2026
QR Redirector<= 2.0.5
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
Events Manager<= 7.4.5
Sensitive Data Exposure
31.8
5.3
03/09/2026
User Registration<= 5.2.7
Broken Access Control
19.32
5.6
03/09/2026
Payflex Payment Gateway<= 2.7.1
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Salon booking system<= 10.31.5
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
VK Google Job Posting Manager<= 1.3.1
PHP Object Injection
N/A
8.8
17/09/2026
WP Spell Check<= 12.1
PHP Object Injection
N/A
7.2
17/09/2026
Simple Event Planner<= 1.5.7
PHP Object Injection
N/A
8.8
17/09/2026
Sunshine Photo Cart<= 3.7.1
PHP Object Injection
N/A
7.2
17/09/2026
WP Ultimate Exporter<= 3.0
PHP Object Injection
N/A
7.2
17/09/2026
Product Feed PRO for WooCommerce<= 13.5.7
PHP Object Injection
N/A
7.2
17/09/2026
Pay with Vipps for WooCommerce<= 6.2.0
PHP Object Injection
N/A
7.2
17/09/2026
RepairBuddy<= 4.1226
Sensitive Data Exposure
2.04
7.1
23/09/2026
Cozy Blocks<= 2.2.23
Insecure Direct Object References (IDOR)
11.9
6.9
23/09/2026

Report vulnerabilities to earn bounties and rewards!

Read more