← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-49074
WordPress JetEngine plugin <= 3.8.9.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-54195
WordPress JetFormBuilder plugin <= 3.6.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-54806
WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability
CVE-2026-54808
WordPress WP Travel Gutenberg Blocks plugin <= 3.9.4 - SQL Injection vulnerability
CVE-2026-49075
WordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerability
CVE-2026-54194
WordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerability
CVE-2026-12256
WordPress Avada theme <= 3.15.3 - PHP Object Injection vulnerability
CVE-2026-39481
WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability
CVE-2026-39532
WordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerability
CVE-2026-52712
WordPress Attendance Manager plugin <= 0.6.2 - SQL Injection vulnerability