← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2026-27370
WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability
CVE-2026-27327
WordPress YayMail – WooCommerce Email Customizer plugin <= 4.3.2 - Broken Access Control vulnerability
CVE-2026-27095
WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability
CVE-2026-27094
WordPress CoBlocks plugin <= 3.1.16 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27071
WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability
CVE-2026-25420
WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability
CVE-2026-25417
WordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25316
WordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerability
CVE-2026-25035
WordPress Contest Gallery plugin <= 28.1.2.2 - Account Takeover vulnerability
CVE-2026-24968
WordPress Xagio SEO plugin <= 7.1.0.30 - Privilege Escalation vulnerability