← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-66709
WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability
CVE-2026-66664
WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66440
WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65548
WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability
CVE-2026-65545
WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61982
WordPress SiteGuard WP Plugin plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61964
WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61963
WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28177
WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28143
WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability