← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2026-42381
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerability
CVE-2026-40762
WordPress WPGraphQL plugin < 2.11.1 - SQL Injection vulnerability
CVE-2026-40745
WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability
CVE-2026-40744
WordPress Beaver Builder plugin <= 2.10.1.2 - SQL Injection vulnerability
CVE-2026-40727
WordPress Groundhogg plugin <= 4.4 - Arbitrary File Deletion vulnerability
CVE-2026-39532
WordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerability
CVE-2026-39499
WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability
CVE-2026-39498
WordPress YayMail plugin <= 4.3.3 - PHP Object Injection vulnerability
CVE-2026-39494
WordPress Product Filter by WBW plugin <= 3.1.2 - SQL Injection vulnerability
CVE-2026-39489
WordPress Download Monitor plugin <= 5.1.9 - Non-Arbitrary File Download vulnerability