← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-32533
WordPress LatePoint plugin <= 5.2.6 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-32530
WordPress Creator LMS plugin <= 1.1.18 - Privilege Escalation vulnerability
CVE-2026-32525
WordPress JetFormBuilder plugin <= 3.5.6.1 - Remote Code Execution (RCE) vulnerability
CVE-2026-32532
WordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32513
WordPress JS Archive List plugin <= 6.1.7 - PHP Object Injection vulnerability
CVE-2026-32520
WordPress RewardsWP plugin <= 1.0.4 - Privilege Escalation vulnerability
CVE-2026-32484
WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability
CVE-2026-32401
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability
CVE-2026-32384
WordPress WpBookingly plugin <= 1.2.9 - Local File Inclusion vulnerability
CVE-2026-27071
WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability