← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2026-39481
WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability
CVE-2026-39478
WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.23.87 - PHP Object Injection vulnerability
CVE-2026-39472
WordPress WooCommerce PDF Invoices & Packing Slips plugin < 5.9.0 - PHP Object Injection vulnerability
CVE-2026-39471
WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerability
CVE-2026-39434
WordPress CTX Feed plugin <= 6.6.26 - PHP Object Injection vulnerability
CVE-2026-34902
WordPress WooCommerce Product Table Lite plugin <= 4.6.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32573
WordPress Nelio AB Testing plugin <= 8.2.7 - Remote Code Execution (RCE) vulnerability
CVE-2026-32533
WordPress LatePoint plugin <= 5.2.6 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-32532
WordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32530
WordPress Creator LMS plugin <= 1.1.18 - Privilege Escalation vulnerability