← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-39466
WordPress Broken Link Checker plugin <= 2.4.7 - SQL Injection vulnerability
CVE-2026-48837
WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability
CVE-2026-45435
WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42774
WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability
CVE-2026-24597
WordPress Organization chart plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-59542
WordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability
CVE-2026-27392
WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-27391
WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-49771
WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability
CVE-2026-48879
WordPress AIWU plugin <= 1.4.17 - Privilege Escalation vulnerability