← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2026-32525
WordPress JetFormBuilder plugin <= 3.5.6.1 - Remote Code Execution (RCE) vulnerability
CVE-2026-32520
WordPress RewardsWP plugin <= 1.0.4 - Privilege Escalation vulnerability
CVE-2026-32513
WordPress JS Archive List plugin <= 6.1.7 - PHP Object Injection vulnerability
CVE-2026-32484
WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability
CVE-2026-32401
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability
CVE-2026-32384
WordPress WpBookingly plugin <= 1.2.9 - Local File Inclusion vulnerability
CVE-2026-31917
WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability
CVE-2026-27406
WordPress My Tickets plugin <= 2.1.0 - Sensitive Data Exposure vulnerability
CVE-2026-27387
WordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability
CVE-2026-27373
WordPress Tablesome plugin <= 1.2.3 - SQL Injection vulnerability