← All credits
daroo | Patchstack Bug Bounty Program
281 vulnerability records and advisories credit this contributor.
CVE-2026-48866
WordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerability
CVE-2026-48839
WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42680
WordPress Contest Gallery Pro plugin <= 29.0.1 - Privilege Escalation vulnerability
CVE-2026-42672
WordPress WP Directory Kit plugin <= 1.5.1 - SQL Injection vulnerability
CVE-2026-27398
WordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerability
CVE-2026-57702
WordPress Amelia plugin <= 2.4.2 - SQL Injection vulnerability
CVE-2026-57816
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57815
WordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerability
CVE-2026-57814
WordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57741
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - Cross Site Scripting (XSS) vulnerability