← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2025-68508
WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability
CVE-2025-68496
WordPress User Feedback plugin <= 1.10.0 - SQL Injection vulnerability
CVE-2025-68084
WordPress Ultimate Auction plugin <= 4.3.3 - Broken Access Control vulnerability
CVE-2025-68072
WordPress Easy Property Listings plugin <= 3.5.20 - Broken Access Control vulnerability
CVE-2025-68071
WordPress Essential Real Estate plugin <= 5.3.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-68069
WordPress Directorist plugin <= 8.6.6 - Broken Access Control vulnerability
CVE-2025-68042
WordPress Travelpayouts plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2025-68027
WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability
CVE-2025-68015
WordPress Event Tickets with Ticket Scanner plugin <= 2.8.5 - Remote Code Execution (RCE) vulnerability
CVE-2025-68005
WordPress Easy Hotel Booking plugin <= 1.9.2 - Broken Access Control vulnerability