← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-32468
WordPress Duitku Payment Gateway plugin <= 2.11.14 - Sensitive Data Exposure vulnerability
CVE-2026-73383
WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability
CVE-2026-73362
WordPress URL Shortify plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73361
WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73342
WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73181
WordPress Extra Product Options & Add-Ons for WooCommerce plugin < 7.6 - Arbitrary File Download vulnerability
CVE-2026-66633
WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66629
WordPress Kirki plugin <= 6.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66596
WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32547
WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability