Ananda Dhakal (Patchstack)

Say thanks

0.00

XP

0

Reports

10

Reports, last 90 days

-

5 Aug, 2026
🇳🇵
Lvl 0
0
0
0
0
Website
X
GitHub
Affected software | Vulnerability
CVE
AXP
Severity
Reported
ShopLentor Pro<= 2.8.5
Broken Access Control
7.95
5.3
01/07/2026
ShopLentor Pro<= 2.8.5
Broken Access Control
3.22
4.3
01/07/2026
JetSearch<= 3.6.1.2
Sensitive Data Exposure
12.19
5.3
02/07/2026
JetBlocks For Elementor<= 1.5.0
Sensitive Data Exposure
36.57
5.3
02/07/2026
JetReviews<= 3.0.1
Sensitive Data Exposure
9.14
5.3
02/07/2026
Auto Featured Image (Auto Post Thumbnail)<= 5.0.4
Server Side Request Forgery (SSRF)
N/A
4.9
30/06/2026
User Profile Picture<= 2.6.3
Insecure Direct Object References (IDOR)
N/A
2.7
30/06/2026
WP Maps<= 4.9.6
Sensitive Data Exposure
12.9
4.3
16/07/2026
Spider Analyser &#8211; WordPress搜索引擎蜘蛛分析插件<= 2.1.3
Remote Code Execution (RCE)
30
10
12/06/2026
Dokan<= 5.0.10
Broken Access Control
N/A
5.3
14/07/2026
Profile Builder<= 3.16.5
Broken Access Control
31.8
5.3
14/07/2026
MailOptin<= 1.2.78.0
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
Export User Data<= 2.2.6
PHP Object Injection
7.35
9.8
08/06/2026
Easy PayPal Buy Now Button<= 2.0.4
Cross Site Scripting (XSS)
14.2
7.1
13/07/2026
Kali Forms<= 2.4.18
Cross Site Scripting (XSS)
16.33
7.1
09/07/2026
Ad Invalid Click Protector (AICP)<= 1.3.0
Broken Access Control
13
6.5
08/07/2026
Exclusive Addons Elementor<= 2.8.0
Sensitive Data Exposure
31.8
5.3
14/07/2026
Easy Digital Downloads<= 3.6.9
Arbitrary File Deletion
N/A
4.9
30/06/2026
Checkout Field Editor for WooCommerce &#8211; Checkout Manager<= 3.0.5
Cross Site Scripting (XSS)
N/A
5.9
15/06/2026
Insert Headers and Footers Code – HT Script<= 1.1.8
Cross Site Request Forgery (CSRF)
N/A
4.3
09/06/2026
Feedzy<= 5.2.4
Server Side Request Forgery (SSRF)
N/A
4.9
14/07/2026
Photonic Gallery & Lightbox for Flickr, SmugMug & Others<= 3.33
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Location Weather<= 3.0.6
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
WP Google Review Slider<= 18.4
Cross Site Request Forgery (CSRF)
4.3
4.3
06/07/2026
WP Google Review Slider<= 18.4
SQL Injection
N/A
7.6
06/07/2026
Kirki<= 6.0.13
Arbitrary File Deletion
N/A
6.8
23/06/2026
ЮKassa для WooCommerce<= 2.16.1
Sensitive Data Exposure
4.88
6.5
12/06/2026
Visual Composer Website Builder<= 45.15.0
Broken Access Control
8.63
5
14/07/2026
Event Tickets<= 5.29.0.1
Broken Access Control
36.57
5.3
16/07/2026
MapPress Maps for WordPress<= 2.97.6
Sensitive Data Exposure
21.2
5.3
16/07/2026
Orbit Fox by ThemeIsle<= 3.0.7
Cross Site Scripting (XSS)
N/A
5.9
16/07/2026
BetterDocs<= 4.6.2
Cross Site Scripting (XSS)
N/A
6.5
14/07/2026
WordPress Social Login and Register<= 7.8.0
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
AffiliateX<= 2.3.5
Server Side Request Forgery (SSRF)
10.8
5.4
09/07/2026
Abandoned Cart Lite for WooCommerce<= 6.8.0
Cross Site Scripting (XSS)
N/A
5.9
09/06/2026
Byteflows Travel &amp; Hotel Booking<= 1.0.0
Sensitive Data Exposure
N/A
7.5
09/07/2026
Paid Member Subscriptions<= 3.0.7
Insecure Direct Object References (IDOR)
7.5
7.5
09/07/2026
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce<= 2.10.22
SQL Injection
N/A
7.6
09/06/2026
Hide My WP Ghost<= 7.0.06
Broken Authentication
29.6
7.4
16/07/2026
Kwayy HTML Sitemap<= 4.0
Cross Site Request Forgery (CSRF)
2.66
7.1
15/06/2026
Machete<= 5.2
Cross Site Scripting (XSS)
N/A
5.9
15/06/2026
Cyr to Lat reloaded – transliteration of links and file names<= 1.3.3
Broken Access Control
N/A
4.3
15/06/2026
افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری)<= 4.4.5
Cross Site Request Forgery (CSRF)
3.25
6.5
12/06/2026
TinyMCE Templates<= 4.8.1
Sensitive Data Exposure
N/A
4.3
12/06/2026
Custom links in Elementor Image Carousel<= 1.1.1
Cross Site Scripting (XSS)
N/A
5.9
12/06/2026
Smart SEO Tool<= 4.1.2
Cross Site Scripting (XSS)
N/A
6.5
12/06/2026
Persian Woocommerce SMS<= 7.2.2
SQL Injection
N/A
7.6
12/06/2026
Qubely<= 1.8.14
Broken Access Control
N/A
4.8
12/06/2026
TemplateSpare<= 4.2.2
Broken Access Control
N/A
4.3
10/06/2026
Graphina<= 3.1.12
Broken Access Control
N/A
5.3
10/06/2026
LIQUID SPEECH BALLOON<= 1.2.6
Cross Site Scripting (XSS)
N/A
6.5
08/06/2026
WP Social Ninja<= 4.3.0
Sensitive Data Exposure
21.2
5.3
16/07/2026
Photo Gallery<= 2.7.7.29
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Accept Donations with PayPal & Stripe<= 1.5.5
Cross Site Scripting (XSS)
N/A
6.5
13/07/2026
Appointment Hour Booking<= 1.5.86
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
MP3 Audio Player for Music, Radio & Podcast by Sonaar<= 5.12
Broken Access Control
N/A
5.3
10/06/2026
Tabs<= 2.5
Cross Site Scripting (XSS)
N/A
5.9
24/06/2026
Complianz<= 7.5.1
Sensitive Data Exposure
N/A
5.3
24/06/2026
Complianz<= 7.5.1
PHP Object Injection
N/A
7.2
24/06/2026
Complianz<= 7.5.1
Server Side Request Forgery (SSRF)
N/A
4.4
24/06/2026
Payment Gateway for PayPal on WooCommerce<= 9.1.4
Broken Access Control
15
7.5
09/07/2026
PayU India<= 3.8.9
Broken Access Control
11.25
7.5
10/06/2026
Ninja Tables<= 5.2.10
Sensitive Data Exposure
31.8
5.3
16/07/2026
Virtue/Ascend/Pinnacle Toolkit<= 4.9.12
Cross Site Scripting (XSS)
11.21
6.5
14/07/2026
Kit (formerly ConvertKit)<= 3.3.5
Broken Access Control
24.38
5.3
14/07/2026
Fluent Support<= 2.3.0
Cross Site Scripting (XSS)
N/A
6.5
09/07/2026
JetBooking<= 4.1.2
Broken Access Control
6.1
5.3
02/07/2026
JetEngine<= 3.8.11
Server Side Request Forgery (SSRF)
21.13
4.9
02/07/2026
JetBooking<= 4.1.2
Server Side Request Forgery (SSRF)
N/A
4.9
02/07/2026
JetElements For Elementor<= 2.9.1.1
Cross Site Scripting (XSS)
28.03
6.5
02/07/2026
Uncanny Automator<= 7.3.2
SQL Injection
N/A
7.6
30/06/2026
Really Simple CSV Importer<= 1.3
Arbitrary File Upload
N/A
9.1
30/06/2026
Zarinpal Gateway<= 5.1.0
Cross Site Request Forgery (CSRF)
N/A
4.3
30/06/2026
Polylang<= 3.8.5
Sensitive Data Exposure
N/A
4.3
24/06/2026
ЮKassa для WooCommerce<= 2.16.1
Broken Access Control
N/A
4.3
12/06/2026
Product Slider for WooCommerce<= 1.13.62
Insecure Direct Object References (IDOR)
N/A
4.3
10/06/2026
ووسلام &#8211; همگام سازی ووکامرس و باسلام<= 1.9.1
Cross Site Request Forgery (CSRF)
1.78
7.1
12/06/2026
گرویتی فرم فارسی<= 3.0.2
SQL Injection
N/A
7.6
10/06/2026
WooCommerce Bulk Edit Products – WP Sheet Editor<= 1.8.21
Broken Access Control
N/A
4.9
09/06/2026
Houzez Login Register<= 3.3.3
Privilege Escalation
49.2
8.2
02/10/2024
WooCommerce PDF Invoice Builder<= 2.0.8
Sensitive Data Exposure
3.74
6.5
04/06/2026
Real Testimonials<= 3.1.15
PHP Object Injection
N/A
7.2
30/06/2026
Themify Builder<= 7.7.4
Cross Site Scripting (XSS)
10.65
7.1
09/06/2026
Index Now<= 3.0.16
Cross Site Request Forgery (CSRF)
N/A
4.3
30/06/2026
FormLayer<= 1.0.6
Sensitive Data Exposure
N/A
5.3
30/06/2026
Exclusive Addons Elementor<= 2.7.9.9
Sensitive Data Exposure
N/A
5.3
25/06/2026
Enable Media Replace<= 4.2.1
Cross Site Scripting (XSS)
N/A
5.9
24/06/2026
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce<= 2.2.0
Broken Authentication
N/A
4.8
10/06/2026
HandL UTM Grabber<= 2.9.2
Cross Site Scripting (XSS)
14.2
7.1
09/06/2026
WP Debugging<= 2.12.2
Cross Site Scripting (XSS)
14.2
7.1
08/06/2026
Werkstatt<= 4.7.2
Cross Site Request Forgery (CSRF)
2.15
4.3
17/09/2024
W3 Total Cache<= 2.9.4
Arbitrary Code Execution
869.4
9
17/04/2026
Werkstatt<= 4.7.2
Broken Access Control
4.3
4.3
17/09/2024
Martfury - WooCommerce Marketplace WordPress Theme<= 3.2.8
Broken Access Control
4.3
4.3
17/09/2024
TheFox<= 3.9.70
Cross Site Scripting (XSS)
4.88
6.5
17/09/2024
Ads by WPQuads<= 3.0.3
Broken Access Control
6.5
6.5
09/06/2026
Simple User Avatar<= 4.9
Insecure Direct Object References (IDOR)
N/A
4.3
15/06/2026
TemplateSpare<= 4.2.0
Arbitrary File Upload
N/A
9.1
10/06/2026
Gmail SMTP<= 1.2.3.19
Cross Site Request Forgery (CSRF)
N/A
4.3
10/06/2026
Hester Core<= 1.1.8
Cross Site Scripting (XSS)
N/A
5.9
12/06/2026

Report vulnerabilities to earn bounties and rewards!

Read more