← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2025-67576
WordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerability
CVE-2025-67560
WordPress Listdom plugin <= 5.0.1 - Broken Access Control vulnerability
CVE-2025-67546
WordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerability
CVE-2025-67520
WordPress Media Library Tools plugin <= 1.6.15 - SQL Injection vulnerability
CVE-2025-67465
WordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-66531
WordPress Salon booking system plugin <= 10.30.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-66530
WordPress Webba Booking plugin <= 6.2.1 - Broken Access Control vulnerability
CVE-2025-66528
WordPress Thank You Page Customizer for WooCommerce plugin <= 1.1.8 - Broken Access Control vulnerability
CVE-2025-66127
WordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerability
CVE-2025-66125
WordPress Ultimate Auction plugin <= 4.3.3 - Sensitive Data Exposure vulnerability