← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2025-67590
WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67593
WordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67581
WordPress TrueBooker plugin <= 1.1.0 - Broken Access Control vulnerability
CVE-2025-67577
WordPress Easy Form Builder plugin <= 3.8.20 - Broken Access Control vulnerability
CVE-2025-67560
WordPress Listdom plugin <= 5.0.1 - Broken Access Control vulnerability
CVE-2025-67520
WordPress Media Library Tools plugin <= 1.6.15 - SQL Injection vulnerability
CVE-2025-67465
WordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-66530
WordPress Webba Booking plugin <= 6.2.1 - Broken Access Control vulnerability
CVE-2025-66531
WordPress Salon booking system plugin <= 10.30.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-66528
WordPress Thank You Page Customizer for WooCommerce plugin <= 1.1.8 - Broken Access Control vulnerability