← All credits
daroo | Patchstack Bug Bounty Program
289 vulnerability records and advisories credit this contributor.
CVE-2026-66615
WordPress Podlove Podcast Publisher plugin <= 4.5.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66649
WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability
CVE-2026-66614
WordPress SEO Plugin by Squirrly SEO plugin <= 14.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66596
WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66633
WordPress Fluent Forms Pro Add On Pack plugin < 6.2.12 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73181
WordPress Extra Product Options & Add-Ons for WooCommerce plugin < 7.6 - Arbitrary File Download vulnerability
CVE-2026-28568
WordPress Quill Forms plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32470
WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
CVE-2026-32474
WordPress Templatiq plugin <= 0.2.5 - Arbitrary File Upload vulnerability
CVE-2026-32547
WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability