← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-42672
WordPress WP Directory Kit plugin <= 1.5.1 - SQL Injection vulnerability
CVE-2026-48879
WordPress AIWU plugin <= 1.4.17 - Privilege Escalation vulnerability
CVE-2026-48866
WordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerability
CVE-2026-48839
WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42680
WordPress Contest Gallery Pro plugin <= 29.0.1 - Privilege Escalation vulnerability
CVE-2026-42728
WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27398
WordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerability
CVE-2026-45435
WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42774
WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability
CVE-2026-24597
WordPress Organization chart plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability