← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2025-68084
WordPress Ultimate Auction plugin <= 4.3.3 - Broken Access Control vulnerability
CVE-2025-68069
WordPress Directorist plugin <= 8.6.6 - Broken Access Control vulnerability
CVE-2025-68044
WordPress Five Star Restaurant Reservations plugin <= 2.7.4 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-68005
WordPress Easy Hotel Booking plugin <= 1.9.2 - Broken Access Control vulnerability
CVE-2025-67975
WordPress aDirectory plugin <= 3.0.3 - Broken Access Control vulnerability
CVE-2025-67944
WordPress Nelio AB Testing plugin <= 8.1.8 - Arbitrary Code Execution vulnerability
CVE-2025-67939
WordPress Tickera plugin <= 3.5.6.2 - Broken Access Control vulnerability
CVE-2025-67926
WordPress Fluent Support plugin <= 1.10.4 - Broken Access Control vulnerability
CVE-2025-67915
WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability
CVE-2025-67598
WordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability