← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2026-24963
WordPress Amelia plugin <= 1.2.38 - Privilege Escalation vulnerability
CVE-2026-24953
WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability
CVE-2026-24942
WordPress WpEvently plugin <= 5.1.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-24636
WordPress Sugar Calendar (Lite) plugin <= 3.9.1 - Broken Access Control vulnerability
CVE-2026-24364
WordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability
CVE-2026-24360
WordPress Seriously Simple Podcasting plugin <= 3.14.1 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-24359
WordPress Dokan plugin <= 4.2.4 - Broken Authentication vulnerability
CVE-2026-24358
WordPress Quiz And Survey Master plugin <= 10.3.3 - Broken Access Control vulnerability
CVE-2026-24357
WordPress WP Recipe Maker plugin <= 10.2.4 - Broken Access Control vulnerability
CVE-2026-24356
WordPress GetGenie plugin <= 4.3.0 - Broken Access Control vulnerability