← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-49770
WordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerability
CVE-2026-49781
WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability
CVE-2026-40727
WordPress Groundhogg plugin <= 4.4 - Arbitrary File Deletion vulnerability
CVE-2026-39489
WordPress Download Monitor plugin <= 5.1.9 - Non-Arbitrary File Download vulnerability
CVE-2026-39471
WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerability
CVE-2026-34902
WordPress WooCommerce Product Table Lite plugin <= 4.6.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-49111
WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability
CVE-2026-42647
WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability
CVE-2026-39494
WordPress Product Filter by WBW plugin <= 3.1.2 - SQL Injection vulnerability
CVE-2026-49771
WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability