← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2025-67975
WordPress aDirectory plugin <= 3.0.3 - Broken Access Control vulnerability
CVE-2025-67954
WordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerability
CVE-2025-67953
WordPress Booking Activities plugin <= 1.16.44 - Privilege Escalation vulnerability
CVE-2025-67944
WordPress Nelio AB Testing plugin <= 8.1.8 - Arbitrary Code Execution vulnerability
CVE-2025-67939
WordPress Tickera plugin <= 3.5.6.2 - Broken Access Control vulnerability
CVE-2025-67598
WordPress SupportCandy plugin <= 3.4.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67593
WordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67590
WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67581
WordPress TrueBooker plugin <= 1.1.0 - Broken Access Control vulnerability
CVE-2025-67577
WordPress Easy Form Builder plugin <= 3.8.20 - Broken Access Control vulnerability