← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2025-63011
WordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-63007
WordPress EventPrime plugin <= 4.2.4.1 - Sensitive Data Exposure vulnerability
CVE-2025-62994
WordPress WP AI CoPilot plugin <= 1.2.7 - Sensitive Data Exposure vulnerability
CVE-2025-62132
WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability
CVE-2025-62131
WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken Access Control vulnerability
CVE-2025-62129
WordPress RestroPress plugin <= 3.2.7 - Broken Access Control vulnerability
CVE-2025-62107
WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-5803
WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerability
CVE-2025-49918
WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerability
CVE-2025-49914
WordPress Restaurant Menu by MotoPress plugin <= 2.4.7 - Sensitive Data Exposure vulnerability