← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-32474
WordPress Templatiq plugin <= 0.2.5 - Arbitrary File Upload vulnerability
CVE-2026-32470
WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
CVE-2026-28568
WordPress Quill Forms plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66450
WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability
CVE-2026-66449
WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61980
WordPress OMGF Pro plugin <= 5.2.7 - Arbitrary File Download vulnerability
CVE-2026-28168
WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability
CVE-2026-66447
WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability
CVE-2026-65549
WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability
CVE-2026-65508
WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability