← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-93774
WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerability
CVE-2026-95601
WordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerability
CVE-2026-95529
WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-84820
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability
CVE-2026-84812
WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability
CVE-2026-84752
WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability
CVE-2026-82224
WordPress SliceWP plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-81298
WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78285
WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability
CVE-2026-78283
WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability