← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2026-56005
WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-12256
WordPress Fusion Builder plugin <= 3.15.3 - PHP Object Injection vulnerability
CVE-2025-69025
WordPress Poptics plugin <= 1.0.20 - Sensitive Data Exposure vulnerability
CVE-2025-69024
WordPress BizPrint plugin <= 4.6.7 - Broken Access Control vulnerability
CVE-2025-69351
WordPress Ninja Tables plugin <= 5.2.4 - SQL Injection vulnerability
CVE-2025-69026
WordPress PopupKit plugin <= 2.1.5 - Sensitive Data Exposure vulnerability
CVE-2025-68044
WordPress Five Star Restaurant Reservations plugin <= 2.7.4 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-67976
WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability
CVE-2025-67926
WordPress Fluent Support plugin <= 1.10.4 - Broken Access Control vulnerability
CVE-2025-67915
WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability