← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2025-66100
WordPress RestroPress plugin <= 3.2.3.5 - Broken Access Control vulnerability
CVE-2025-62996
WordPress Custom Layouts – Post + Product grids made easy plugin <= 1.4.12 - Broken Access Control vulnerability
CVE-2025-62994
WordPress WP AI CoPilot plugin <= 1.2.7 - Sensitive Data Exposure vulnerability
CVE-2025-64369
WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability
CVE-2025-64276
WordPress Survey Maker plugin <= 5.1.9.4 - Broken Access Control vulnerability
CVE-2025-64270
WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive Data Exposure vulnerability
CVE-2026-27387
WordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability
CVE-2026-27373
WordPress Tablesome plugin <= 1.2.3 - SQL Injection vulnerability
CVE-2026-27327
WordPress YayMail – WooCommerce Email Customizer plugin <= 4.3.2 - Broken Access Control vulnerability
CVE-2026-27094
WordPress CoBlocks plugin <= 3.1.16 - Cross Site Scripting (XSS) vulnerability