Ananda Dhakal (Patchstack)

Say thanks

7,226.71

XP

614

Reports

16

Reports, last 90 days

-

6 Nov, 2026
🇳🇵
Lvl 8
0
0
0
0
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
GS Testimonial Slider<= 3.3.10
PHP Object Injection
N/A
8.8
17/09/2026
Product Feed Manager<= 7.14.1
PHP Object Injection
N/A
7.2
17/09/2026
LeadSnap<= 1.25
PHP Object Injection
4.9
9.8
17/09/2026
Dynamic QR Code &#8211; generator<= 1.0.1
PHP Object Injection
N/A
8.8
17/09/2026
myPOS Checkout<= 1.4.5
PHP Object Injection
N/A
7.2
17/09/2026
News Kit Elementor Addons<= 1.5.0
PHP Object Injection
2.2
8.8
17/09/2026
Finale Lite<= 2.21.0
PHP Object Injection
N/A
7.2
17/09/2026
WP Media folders<= 1.1.10
PHP Object Injection
N/A
8.8
17/09/2026
Frisbii Pay<= 1.8.19
PHP Object Injection
N/A
8.8
17/09/2026
Sastra Essential Addons for Elementor<= 1.2.3
PHP Object Injection
N/A
7.2
17/09/2026
Product Catalog Feed by PixelYourSite<= 3.1.4
PHP Object Injection
N/A
7.2
17/09/2026
FV Flowplayer Video Player<= 7.5.56.7212
PHP Object Injection
N/A
7.2
17/09/2026
Social Snap<= 1.5.4
PHP Object Injection
N/A
8.8
17/09/2026
10Web Social Photo Feed<= 1.5.6
PHP Object Injection
N/A
8.8
17/09/2026
Hotel Booking<= 3.8
Insecure Direct Object References (IDOR)
3.25
6.5
23/09/2026
WP Crowdfunding<= 2.2.2
Sensitive Data Exposure
7.5
7.5
23/09/2026
BuddyPress Xprofile Custom Field Types<= 1.3.1
PHP Object Injection
2.2
8.8
17/09/2026
Extra Fees Plugin for WooCommerce<= 4.4.0
PHP Object Injection
N/A
8.8
17/09/2026
WPCargo Track & Trace<= 8.0.6
PHP Object Injection
N/A
7.2
17/09/2026
Zippy<= 1.7.0
PHP Object Injection
N/A
7.2
17/09/2026
Upsell Order Bump Offer for WooCommerce<= 3.1.7
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Easy Digital Downloads<= 3.7.1
Race Condition
2.36
5.9
03/09/2026
Ultimate Member<= 2.13.1
PHP Object Injection
49
9.8
03/09/2026
Filter Everything&nbsp;— WordPress &amp; WooCommerce Filters<= 1.9.7
PHP Object Injection
N/A
7.2
17/09/2026
Phoenix Media Rename<= 3.13.5
PHP Object Injection
N/A
8.8
17/09/2026
Dokan<= 5.3.1
PHP Object Injection
N/A
7.2
17/09/2026
GS Logo Slider<= 3.8.9
PHP Object Injection
N/A
8.8
17/09/2026
Accordion<= 2.3.25
PHP Object Injection
N/A
7.2
17/09/2026
Zoho Flow<= 2.14.5
PHP Object Injection
7.35
9.8
17/09/2026
Relevanssi <= 4.28.4
PHP Object Injection
N/A
7.2
17/09/2026
Extension for Leaflet Map<= 6.0
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
ND Shortcodes For Visual Composer<= 7.8
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
Waitlist Woocommerce ( Back in stock notifier )<= 2.9.1
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
Restaurant Menu – Food Ordering System – Table Reservation<= 2.4.4
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
LiteSpeed Cache<= 7.9
Sensitive Data Exposure
135.7
5.9
18/08/2026
Newsletters<= 4.18.1
PHP Object Injection
4.9
9.8
17/09/2026
LearnPress<= 4.4.10
Broken Access Control
16.2
5.4
03/09/2026
WordPress Team Members – GS Plugins<= 2.8.2
PHP Object Injection
N/A
8.8
17/09/2026
GS Pins for Pinterest<= 1.9.2
PHP Object Injection
N/A
8.8
17/09/2026
MDTF<= 1.4.0
Cross Site Scripting (XSS)
1.4
6.5
24/09/2026
PAYCOMET for WooCommerce<= 5.45
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
YayMail<= 4.4.6
PHP Object Injection
N/A
7.2
17/09/2026
Books Gallery<= 4.8.4
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
FV Simpler SEO<= 1.9.7
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Chained Quiz<= 1.4.1
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Post Video Players<= 1.165
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Podamibe Custom User Gravatar<= 1.0.8
Cross Site Scripting (XSS)
1.63
6.5
11/09/2026
Razorpay Payment Button Elementor Plugin<= 1.2.8
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Responsive Slider<= 0.1.9
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
FV Simpler SEO<= 1.9.7
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
IMPress for IDX Broker<= 3.3.1
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
Weaver Xtreme Theme Support<= 7.1.1
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
Events Manager<= 7.4.8
Race Condition
2.22
3.7
03/09/2026
SureCart<= 4.9.3
PHP Object Injection
N/A
8.8
17/09/2026
Polylang<= 3.8.9
PHP Object Injection
N/A
7.2
17/09/2026
Event post<= 6.1.1
Broken Access Control
N/A
5.4
23/09/2026
Html5 Audio Player<= 2.8.8
Cross Site Scripting (XSS)
5.61
6.5
13/07/2026
WooCommerce Multilingual & Multicurrency<= 5.5.8
PHP Object Injection
N/A
7.2
17/09/2026
WooCommerce9.8.0-11.1.2
Privilege Escalation
N/A
7.2
25/08/2026
Jetpack VideoPress<= 3.6
Broken Access Control
4.88
6.5
20/08/2026
WP Rollback<= 3.1.2
Sensitive Data Exposure
59
5.9
25/08/2026
Forminator<= 1.57.3
Arbitrary Content Deletion
103.5
7.5
03/09/2026
Tutor LMS<= 4.2.0
Race Condition
2.12
5.3
03/09/2026
Tainacan<= 1.3.0
PHP Object Injection
N/A
7.2
17/09/2026
Slider by 10Web<= 1.2.62
PHP Object Injection
N/A
8.8
17/09/2026
Robo Gallery<= 5.1.6
Cross Site Scripting (XSS)
N/A
6.5
24/09/2026
YITH WooCommerce Affiliates<= 3.31.0
PHP Object Injection
N/A
7.2
17/09/2026
WP Ultimate CSV Importer<= 9.2
SQL Injection
N/A
7.6
08/09/2026
WP Post Author<= 4.0.0
SQL Injection
N/A
7.6
08/09/2026
Slider by 10Web<= 1.2.63
SQL Injection
N/A
7.6
08/09/2026
Jetpack<= 16.2
Broken Authentication
86.4
5.4
20/08/2026
Jetpack<= 16.2
Broken Authentication
76.8
4.8
20/08/2026
Quiz And Survey Master<= 11.2.7
PHP Object Injection
7.59
8.8
17/09/2026
WP Associate Post R2<= 5.0.1
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Product Configurator for WooCommerce<= 1.7.5
PHP Object Injection
N/A
7.2
17/09/2026
QA Analytics<= 5.3.0.0
Sensitive Data Exposure
3.45
6.9
23/09/2026
Post title marquee scroll<= 9.9
SQL Injection
N/A
7.6
08/09/2026
Pix por Piggly (para Woocommerce)<= 2.1.2
SQL Injection
N/A
7.6
08/09/2026
Leyka<= 3.32.3
SQL Injection
N/A
7.6
08/09/2026
Dynamic User Directory<= 2.4
SQL Injection
N/A
7.6
08/09/2026
affiliate-toolkit<= 3.9.1
SQL Injection
N/A
7.6
08/09/2026
Frontend Admin by DynamiApps<= 3.29.13
SQL Injection
N/A
7.6
08/09/2026
WordPress<= 7.1.2
Sensitive Data Exposure
276
6.9
21/09/2026
SiteVault – Backup, Restore, Migration &amp; Cloning<= 1.5.19
Remote Code Execution (RCE)
N/A
10
28/08/2026
Swish Migrate and Backup<= 1.4.0
Sensitive Data Exposure
N/A
5.9
28/08/2026
Web Plura Backup &amp; Restore Manager<= 0.2.68
Sensitive Data Exposure
N/A
7.5
28/08/2026
FV Player 8<= 8.1.8
Cross Site Scripting (XSS)
3.55
7.1
11/09/2026
Image Slider Widget<= 1.1.130
Cross Site Scripting (XSS)
N/A
6.5
11/09/2026
10Web Social Photo Feed<= 1.4.35
Broken Access Control
13
6.5
08/07/2026
Front End PM<= 11.4.6
Cross Site Scripting (XSS)
4.88
6.5
09/07/2026
Mailjet Email Marketing<= 6.2.3
Sensitive Data Exposure
15
5.3
09/07/2026
Captcha by BestWebSoft<= 5.3.1
Bypass Vulnerability
N/A
5.3
15/06/2026
Tabs<= 2.5
Remote Code Execution (RCE)
N/A
8
24/06/2026
Graphina – Charts and Graphs For Elementor<= 3.1.12
Broken Authentication
15
7.5
10/06/2026
Challan<= 3.7.93
Privilege Escalation
N/A
7.2
04/06/2026
Easy Digital Downloads<= 3.7.1
Broken Access Control
30
7.5
03/09/2026
WP Migration Plugin DB & Files – WP Synchro<= 1.16.1
Bypass Vulnerability
3.75
7.5
28/08/2026
SafeSnap – Verified WordPress Backup &amp; Restore<= 2.1.2
Sensitive Data Exposure
N/A
7.5
28/08/2026
WXD Backup Lite<= 1.0.2
Broken Access Control
N/A
7.5
28/08/2026
Museder RestoreOne<= 2.7.277
Sensitive Data Exposure
N/A
7.5
28/08/2026

Report vulnerabilities to earn bounties and rewards!

Read more