← All credits
daroo | Patchstack Bug Bounty Program
289 vulnerability records and advisories credit this contributor.
CVE-2026-82224
WordPress SliceWP plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-81298
WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78283
WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78257
WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability
CVE-2026-78285
WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability
CVE-2026-78282
WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66650
WordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerability
CVE-2026-74012
WordPress TaxoPress plugin <= 3.51.0 - PHP Object Injection vulnerability
CVE-2026-66597
WordPress wpDataTables plugin <= 6.5.1.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66605
WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability