← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-57726
WordPress Kirki plugin <= 6.0.12 - SQL Injection vulnerability
CVE-2026-57815
WordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerability
CVE-2026-57674
WordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57687
WordPress Custom Field Template plugin <= 2.7.8 - SQL Injection vulnerability
CVE-2026-57673
WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27436
WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability
CVE-2026-57344
WordPress Classified Listing plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57679
WordPress GeekyBot plugin <= 1.2.5 - SQL Injection vulnerability
CVE-2026-57671
WordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57678
WordPress Slider Revolution plugin 7.0.0-7.0.16 - Cross Site Scripting (XSS) vulnerability