← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2026-49781
WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability
CVE-2026-49770
WordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerability
CVE-2026-49769
WordPress wpForo Forum plugin <= 3.1.0 - PHP Object Injection vulnerability
CVE-2026-49111
WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability
CVE-2026-45214
WordPress Xpro Elementor Addons plugin <= 1.5.1 - SQL Injection vulnerability
CVE-2026-45213
WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability
CVE-2026-42775
WordPress AutomatorWP plugin <= 5.7.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42728
WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42647
WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability
CVE-2026-42386
WordPress Order Delivery Date for WooCommerce plugin <= 4.5.1 - SQL Injection vulnerability