← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-27391
WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-57702
WordPress Amelia plugin <= 2.4.2 - SQL Injection vulnerability
CVE-2026-57816
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57814
WordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57363
WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57715
WordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57706
WordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57741
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57708
WordPress Contact Form Entries plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57714
WordPress LatePoint plugin <= 5.6.3 - SQL Injection vulnerability