← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2026-56055
WordPress RealHomes theme <= 4.5.3 - PHP Object Injection vulnerability
CVE-2026-56043
WordPress Customer Reviews for WooCommerce plugin <= 5.110.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-56072
WordPress WoodMart theme <= 8.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-56058
WordPress Quform plugin <= 2.23.0 - Arbitrary File Upload vulnerability
CVE-2026-54820
WordPress JetBooking plugin <= 4.0.4.1 - SQL Injection vulnerability
CVE-2026-56046
WordPress ListingPro theme <= 2.9.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-56071
WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-54823
WordPress Widget Options plugin <= 4.2.3 - Remote Code Execution (RCE) vulnerability
CVE-2026-56054
WordPress JS Help Desk plugin <= 3.1.1 - Arbitrary File Deletion vulnerability
CVE-2026-56049
WordPress Post Snippets plugin <= 4.0.19 - Remote Code Execution (RCE) vulnerability