Ananda Dhakal (Patchstack)

Say thanks

0.00

XP

0

Reports

14

Reports, last 90 days

-

17 Oct, 2026
🇳🇵
Lvl 0
0
0
0
0
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
YayMail<= 4.4.6
PHP Object Injection
N/A
7.2
17/09/2026
Books Gallery<= 4.8.4
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
FV Simpler SEO<= 1.9.7
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Chained Quiz<= 1.4.1
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Post Video Players<= 1.165
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Podamibe Custom User Gravatar<= 1.0.8
Cross Site Scripting (XSS)
1.63
6.5
11/09/2026
Razorpay Payment Button Elementor Plugin<= 1.2.8
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Responsive Slider<= 0.1.9
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
FV Simpler SEO<= 1.9.7
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
IMPress for IDX Broker<= 3.3.1
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
Weaver Xtreme Theme Support<= 7.0.1
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
Events Manager<= 7.4.8
Race Condition
2.22
3.7
03/09/2026
SureCart<= 4.9.3
PHP Object Injection
N/A
8.8
17/09/2026
Polylang<= 3.8.9
PHP Object Injection
N/A
7.2
17/09/2026
Event post<= 6.1.1
Broken Access Control
N/A
5.4
23/09/2026
Html5 Audio Player<= 2.8.8
Cross Site Scripting (XSS)
5.61
6.5
13/07/2026
WooCommerce Multilingual & Multicurrency<= 5.5.8
PHP Object Injection
N/A
7.2
17/09/2026
WooCommerce9.8.0-11.1.2
Privilege Escalation
N/A
7.2
25/08/2026
Jetpack VideoPress<= 3.6
Broken Access Control
4.88
6.5
20/08/2026
WP Rollback<= 3.1.2
Sensitive Data Exposure
59
5.9
25/08/2026
Forminator<= 1.57.3
Arbitrary Content Deletion
103.5
7.5
03/09/2026
Tutor LMS<= 4.1.3
Race Condition
2.12
5.3
03/09/2026
Tainacan<= 1.3.0
PHP Object Injection
N/A
7.2
17/09/2026
Slider by 10Web<= 1.2.62
PHP Object Injection
N/A
8.8
17/09/2026
Robo Gallery<= 5.1.6
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
YITH WooCommerce Affiliates<= 3.31.0
PHP Object Injection
N/A
7.2
17/09/2026
WP Ultimate CSV Importer<= 9.2
SQL Injection
N/A
7.6
08/09/2026
WP Post Author<= 4.0.0
SQL Injection
N/A
7.6
08/09/2026
Slider by 10Web<= 1.2.63
SQL Injection
N/A
7.6
08/09/2026
Jetpack<= 16.2
Broken Authentication
86.4
5.4
20/08/2026
Jetpack<= 16.2
Broken Authentication
76.8
4.8
20/08/2026
Quiz And Survey Master<= 11.2.7
PHP Object Injection
7.59
8.8
17/09/2026
WP Associate Post R2<= 5.0.1
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Product Configurator for WooCommerce<= 1.7.5
PHP Object Injection
N/A
7.2
17/09/2026
QA Analytics<= 5.3.0.0
Sensitive Data Exposure
3.45
6.9
23/09/2026
Post title marquee scroll<= 9.9
SQL Injection
N/A
7.6
08/09/2026
Pix por Piggly (para Woocommerce)<= 2.1.2
SQL Injection
N/A
7.6
08/09/2026
Leyka<= 3.32.3
SQL Injection
N/A
7.6
08/09/2026
Dynamic User Directory<= 2.4
SQL Injection
N/A
7.6
08/09/2026
affiliate-toolkit<= 3.9.1
SQL Injection
N/A
7.6
08/09/2026
Frontend Admin by DynamiApps<= 3.29.13
SQL Injection
N/A
7.6
08/09/2026
WordPress<= 7.1.2
Sensitive Data Exposure
276
6.9
21/09/2026
SiteVault – Backup, Restore, Migration &amp; Cloning<= 1.5.19
Remote Code Execution (RCE)
N/A
10
28/08/2026
Swish Migrate and Backup<= 1.4.0
Sensitive Data Exposure
N/A
5.9
28/08/2026
Web Plura Backup &amp; Restore Manager<= 0.2.25
Sensitive Data Exposure
N/A
7.5
28/08/2026
FV Player 8<= 8.1.8
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Image Slider Widget<= 1.1.130
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
10Web Social Photo Feed<= 1.4.35
Broken Access Control
13
6.5
08/07/2026
Front End PM<= 11.4.6
Cross Site Scripting (XSS)
4.88
6.5
09/07/2026
Mailjet Email Marketing<= 6.2.3
Sensitive Data Exposure
15
5.3
09/07/2026
Captcha by BestWebSoft<= 5.2.8
Bypass Vulnerability
N/A
5.3
15/06/2026
Tabs<= 2.5
Remote Code Execution (RCE)
N/A
8
24/06/2026
Graphina – Charts and Graphs For Elementor<= 3.1.13
Broken Authentication
15
7.5
10/06/2026
Challan<= 3.7.90
Privilege Escalation
N/A
7.2
04/06/2026
Easy Digital Downloads<= 3.7.1
Broken Access Control
30
7.5
03/09/2026
WP Migration Plugin DB & Files – WP Synchro<= 1.16.1
Bypass Vulnerability
3.75
7.5
28/08/2026
SafeSnap – Verified WordPress Backup &amp; Restore<= 2.1.2
Sensitive Data Exposure
N/A
7.5
28/08/2026
WXD Backup Lite<= 1.0.2
Broken Access Control
N/A
7.5
28/08/2026
Museder RestoreOne<= 2.7.276
Sensitive Data Exposure
N/A
7.5
28/08/2026
Norvis Backup<= 1.1.0
Sensitive Data Exposure
N/A
7.5
28/08/2026
Sitemovr<= 1.0.1
Sensitive Data Exposure
N/A
7.5
28/08/2026
Snapshotify &#8211; All-in-One Backup &amp; Restore &amp; Migrate<= 1.3.6
Sensitive Data Exposure
N/A
7.5
28/08/2026
FluentBooking Pro< 2.5.0
Broken Access Control
N/A
7.5
13/08/2026
Fluent Affiliate Pro<= 1.6.4
Broken Access Control
N/A
7.5
13/08/2026
Mapster WP Maps<= 2.0.4
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Polylang<= 3.8.7
Sensitive Data Exposure
25.96
4.3
25/08/2026
Motors<= 1.4.124
Sensitive Data Exposure
11.9
6.9
23/09/2026
Login Lockdown<= 2.17
Bypass Vulnerability
51.52
4.8
25/08/2026
Import and export users and customers<= 2.5.5
Privilege Escalation
N/A
7.2
28/08/2026
SiteVault – Backup, Restore, Migration &amp; Cloning<= 1.5.17
Sensitive Data Exposure
N/A
7.5
28/08/2026
Logo Showcase<= 4.0.4
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
MP3 Audio Player for Music, Radio & Podcast by Sonaar<= 5.14.2
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
eCommerce Product Catalog<= 3.6.2
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
Video Conferencing with Zoom<= 4.6.10
Sensitive Data Exposure
5.3
5.3
23/09/2026
QR Redirector<= 2.0.5
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
Events Manager<= 7.4.5
Sensitive Data Exposure
31.8
5.3
03/09/2026
User Registration<= 5.2.7
Broken Access Control
19.32
5.6
03/09/2026
Payflex Payment Gateway<= 2.7.1
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Salon booking system<= 10.31.5
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
VK Google Job Posting Manager<= 1.3.1
PHP Object Injection
N/A
8.8
17/09/2026
WP Spell Check<= 12.1
PHP Object Injection
N/A
7.2
17/09/2026
Simple Event Planner<= 1.5.7
PHP Object Injection
N/A
8.8
17/09/2026
Sunshine Photo Cart<= 3.7.1
PHP Object Injection
N/A
7.2
17/09/2026
WP Ultimate Exporter<= 3.0
PHP Object Injection
N/A
7.2
17/09/2026
Product Feed PRO for WooCommerce<= 13.5.7
PHP Object Injection
N/A
7.2
17/09/2026
Pay with Vipps for WooCommerce<= 6.2.0
PHP Object Injection
N/A
7.2
17/09/2026
RepairBuddy<= 4.1226
Sensitive Data Exposure
2.04
7.1
23/09/2026
Cozy Blocks<= 2.2.23
Insecure Direct Object References (IDOR)
11.9
6.9
23/09/2026
AI Chatbot for WordPress – Hyve Lite<= 2.0.2
Insecure Direct Object References (IDOR)
10.35
6.9
23/09/2026
Five Star Restaurant Reservations<= 2.7.24
Sensitive Data Exposure
15
7.5
23/09/2026
RepairBuddy<= 4.1225
Cross Site Scripting (XSS)
0.93
6.5
24/09/2026
LearnPress<= 4.4.10
Broken Access Control
12.9
4.3
03/09/2026
Booking Calendar<= 11.8.4
Race Condition
1.48
3.7
03/09/2026
Mindio Magic MCP<= 0.5.6
Sensitive Data Exposure
N/A
4.3
28/08/2026
Aculect AI Companion<= 0.8.2
Unvalidated Redirects and Forwards
N/A
4.7
28/08/2026
WDS MCP Content Manager<= 3.10.4
Broken Access Control
N/A
4.3
28/08/2026
WebSamurai<= 1.0.7
Broken Access Control
N/A
6.5
28/08/2026
Airano MCP Bridge<= 2.11.0
Broken Access Control
N/A
6.5
28/08/2026
Smart One Click Setup – Complete Demo Import &amp; Export<= 1.4.3
Sensitive Data Exposure
N/A
5.3
28/08/2026
IATO MCP<= 1.12.0
Broken Access Control
N/A
6.5
28/08/2026

Report vulnerabilities to earn bounties and rewards!

Read more