← All credits
daroo | Patchstack Bug Bounty Program
289 vulnerability records and advisories credit this contributor.
CVE-2025-66528
WordPress Thank You Page Customizer for WooCommerce plugin <= 1.1.8 - Broken Access Control vulnerability
CVE-2025-66122
WordPress Stylish Price List plugin <= 7.2.2 - Broken Access Control vulnerability
CVE-2026-28177
WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78535
WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability
CVE-2026-81797
WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability
CVE-2026-40803
WordPress Jotform – AI Chatbot plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62037
WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94167
WordPress Kubio AI Page Builder plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-104670
WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-56005
WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability