← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-66596
WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66633
WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73181
WordPress Extra Product Options & Add-Ons for WooCommerce plugin < 7.6 - Arbitrary File Download vulnerability
CVE-2026-28568
WordPress Quill Forms plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32470
WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
CVE-2026-32474
WordPress Templatiq plugin <= 0.2.5 - Arbitrary File Upload vulnerability
CVE-2026-32547
WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66629
WordPress Kirki plugin <= 6.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73361
WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66667
WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability