Ananda Dhakal

Ananda Dhakal is a security researcher credited with 323 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #23 of 3,515 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2026, with 176 findings.

Their research concentrates on Missing Authorization, which accounts for 87 of their findings (27%). Other recurring categories include Cross-Site Scripting, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 5.6, peaking at 10.0. Severity breakdown: 12 critical and 36 high.

The most affected software includes Fluent Boards Pro (5), Grand Restaurant WordPress (5), Pie Register Premium (5), across 256 distinct plugins, themes and core versions in total.

257 of the 323 disclosed issues have a vendor fix, while 66 remain unpatched. The most severe finding, "JobSearch <= 2.5.3 - Unauthenticated PHP Object Injection", scores 10.0 out of 10.

202420252026
Critical
High
Medium
Low
Global Rank

#23

of 3,515 researchers

Vulns

343

Critical12
High41
Medium287
Low3
Affected Assets

269

243plugins26themes
Avg CVSS

5.6

Average score of vulnerabilities

Researcher Submissions

323 records
2026-08-31 00:00CVE-2026-74010
5.3
Medium
Ananda DhakalNo
2026-08-31 00:00CVE-2026-83562
6.4
Medium
Ananda DhakalYes
2026-08-28 00:00CVE-2026-81296
5.3
Medium
Ananda DhakalYes
2026-08-28 00:00CVE-2026-82228
5.3
Medium
Ananda DhakalYes
2026-08-28 00:00CVE-2026-81297
6.3
Medium
Ananda DhakalYes
2026-08-28 00:00CVE-2026-82229
7.2
High
Ananda DhakalYes
2026-08-27 00:00CVE-2026-81284
4.3
Medium
Ananda DhakalYes
2026-08-27 00:00CVE-2026-81757
8.8
High
Ananda DhakalYes
2026-08-26 00:00CVE-2026-81273
4.3
Medium
Ananda DhakalYes
2026-08-26 00:00CVE-2026-78273
6.4
Medium
Ananda DhakalYes
Showing 1–10 of 250 reports

Showing the 250 most recent of 323 records. Every record has its own page and is listed in the sitemap.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C