← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-73362
WordPress URL Shortify plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73383
WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability
CVE-2026-73342
WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32468
WordPress Duitku Payment Gateway plugin <= 2.11.14 - Sensitive Data Exposure vulnerability
CVE-2026-66449
WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66450
WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability
CVE-2026-28168
WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability
CVE-2026-61980
WordPress OMGF Pro plugin <= 5.2.7 - Arbitrary File Download vulnerability
CVE-2026-66664
WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65548
WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability