← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-31917
WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability
CVE-2026-27370
WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability
CVE-2026-27406
WordPress My Tickets plugin <= 2.1.0 - Sensitive Data Exposure vulnerability
CVE-2025-68514
WordPress Paid Member Subscriptions plugin <= 2.16.8 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-32223
WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-69318
WordPress JobWP plugin <= 2.4.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69025
WordPress Poptics plugin <= 1.0.20 - Sensitive Data Exposure vulnerability
CVE-2025-49914
WordPress Restaurant Menu by MotoPress plugin <= 2.4.7 - Sensitive Data Exposure vulnerability
CVE-2025-68072
WordPress Easy Property Listings plugin <= 3.5.20 - Broken Access Control vulnerability
CVE-2025-68042
WordPress Travelpayouts plugin <= 1.2.2 - Broken Access Control vulnerability