← All credits
daroo | Patchstack Bug Bounty Program
289 vulnerability records and advisories credit this contributor.
CVE-2025-64630
WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability
CVE-2025-64261
WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability
CVE-2025-64250
WordPress Directorist plugin <= 8.6.6 - Open Redirection vulnerability
CVE-2025-64257
WordPress My Tickets plugin <= 2.1.0 - Broken Access Control vulnerability
CVE-2025-64242
WordPress Easy Property Listings plugin <= 3.5.22 - Broken Access Control vulnerability
CVE-2025-64255
WordPress Admin and Site Enhancements (ASE) plugin <= 8.0.8 - Broken Access Control vulnerability
CVE-2025-64201
WordPress PowerPress Podcasting plugin <= 11.13.12 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-63012
WordPress WP Hotel Booking plugin <= 2.2.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-63013
WordPress WP Hotel Booking plugin <= 2.2.7 - Sensitive Data Exposure vulnerability
CVE-2025-63014
WordPress Gmedia Photo Gallery plugin <= 1.25.0 - Cross Site Request Forgery (CSRF) vulnerability