daroo | Patchstack Bug Bounty Program

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability

WordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability

WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability

WordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerability

WordPress Contest Gallery plugin <= 28.1.2.2 - Account Takeover vulnerability

WordPress Amelia plugin <= 1.2.38 - Privilege Escalation vulnerability

WordPress Xagio SEO plugin <= 7.1.0.30 - Privilege Escalation vulnerability

WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability

WordPress WpEvently plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Sugar Calendar (Lite) plugin <= 3.9.1 - Broken Access Control vulnerability