← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-39499
WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability
CVE-2026-49769
WordPress wpForo Forum plugin <= 3.1.0 - PHP Object Injection vulnerability
CVE-2026-39434
WordPress CTX Feed plugin <= 6.6.26 - PHP Object Injection vulnerability
CVE-2026-39472
WordPress WooCommerce PDF Invoices & Packing Slips plugin < 5.9.0 - PHP Object Injection vulnerability
CVE-2026-40762
WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability
CVE-2026-39498
WordPress YayMail plugin <= 4.3.3 - PHP Object Injection vulnerability
CVE-2026-39478
WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.23.87 - PHP Object Injection vulnerability
CVE-2026-42381
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerability
CVE-2026-42386
WordPress Order Delivery Date for WooCommerce plugin <= 4.5.1 - SQL Injection vulnerability
CVE-2026-42775
WordPress AutomatorWP plugin <= 5.7.2 - Cross Site Scripting (XSS) vulnerability