← All credits

daroo | Patchstack Bug Bounty Program

283 vulnerability records and advisories credit this contributor.

CVE-2025-49913
WordPress CoSchedule plugin <= 3.4.0 - Broken Access Control vulnerability
CVE-2025-47500
WordPress Stackable plugin <= 3.19.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32223
WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability