← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-57344
WordPress Classified Listing plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57679
WordPress GeekyBot plugin <= 1.2.5 - SQL Injection vulnerability
CVE-2026-57671
WordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57678
WordPress Slider Revolution plugin 7.0.0-7.0.16 - Cross Site Scripting (XSS) vulnerability
CVE-2026-56008
WordPress Fusion Builder plugin <= 3.15.4 - Privilege Escalation vulnerability
CVE-2026-57321
WordPress H5P plugin <= 1.17.7 - Arbitrary File Deletion vulnerability
CVE-2026-57346
WordPress Embed Privacy plugin <= 1.12.3 - Arbitrary File Deletion vulnerability
CVE-2026-56043
WordPress Customer Reviews for WooCommerce plugin <= 5.110.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-56055
WordPress RealHomes theme <= 4.5.3 - PHP Object Injection vulnerability
CVE-2026-57315
WordPress Blocksy Companion Pro plugin <= 2.1.45 - Remote Code Execution (RCE) vulnerability