← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2025-67474
WordPress ForumWP plugin <= 2.1.4 - Broken Access Control vulnerability
CVE-2025-64257
WordPress My Tickets plugin <= 2.1.0 - Broken Access Control vulnerability
CVE-2025-64242
WordPress Easy Property Listings plugin <= 3.5.22 - Broken Access Control vulnerability
CVE-2025-63013
WordPress WP Hotel Booking plugin <= 2.2.7 - Sensitive Data Exposure vulnerability
CVE-2025-63012
WordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-63006
WordPress EventPrime plugin <= 4.2.4.1 - Broken Access Control vulnerability
CVE-2025-62996
WordPress Custom Layouts – Post + Product grids made easy plugin <= 1.4.12 - Broken Access Control vulnerability
CVE-2026-97271
WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96350
WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability
CVE-2025-63078
WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Broken Access Control vulnerability