← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-78257
WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability
CVE-2026-78282
WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66650
WordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerability
CVE-2026-74012
WordPress TaxoPress plugin <= 3.51.0 - PHP Object Injection vulnerability
CVE-2026-66649
WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability
CVE-2026-66615
WordPress Podlove Podcast Publisher plugin <= 4.5.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66605
WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66597
WordPress wpDataTables plugin <= 6.5.1.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66614
WordPress SEO Plugin by Squirrly SEO plugin <= 14.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66667
WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability