Bibek Dhakal

Bibek Dhakal is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #817 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 2 of their findings (40%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization. The average CVSS score across these disclosures is 4.3, peaking at 4.3.

The most affected software includes MasterStudy LMS WordPress Plugin (3), WP Attractive Donations System (1), WP Attractive Donations System - Easy… (1), across 3 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched.

2025

Critical

High

Medium

Low

Global Rank

#817

of 3,515 researchers

Vulns

Critical0

High0

Medium5

Low0

Affected Assets

3plugins

Avg CVSS

4.3

Average score of vulnerabilities

Researcher Submissions

5 records


2025-10-16 00:00	MasterStudy LMS <= 3.6.20 - Authenticated (Instructor+) Sensitive Information Exposure MasterStudy LMS WordPress Plugin <= 3.6.20	`CVE-2025-59575`	4.3 Medium	Bibek Dhakal	Yes
2025-10-02 00:00	Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Cross-Site Request Forgery WP Attractive Donations System - Easy… <= 1.25	`CVE-2025-58999`	4.3 Medium	Bibek Dhakal	No
2025-09-22 00:00	MasterStudy LMS <= 3.6.20 - Authenticated (Subscriber+) Race Condition to Multiple Reviews MasterStudy LMS WordPress Plugin <= 3.6.20	`CVE-2025-59577`	4.3 Medium	Bibek Dhakal	Yes
2025-09-22 00:00	MasterStudy LMS <= 3.6.20 - Missing Authorization MasterStudy LMS WordPress Plugin <= 3.6.20	`CVE-2025-59576`	4.3 Medium	Bibek Dhakal	Yes
2025-09-22 00:00	WP Attractive Donations System < 1.29 - Cross-Site Request Forgery WP Attractive Donations System < 1.29	`CVE-2025-58956`	4.3 Medium	Bibek Dhakal	Yes

Showing 1–5 of 5 reports