← All credits
daroo | Patchstack Bug Bounty Program
289 vulnerability records and advisories credit this contributor.
CVE-2026-66629
WordPress Kirki plugin <= 6.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73361
WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66667
WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73362
WordPress URL Shortify plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73383
WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability
CVE-2026-73342
WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32468
WordPress Duitku Payment Gateway plugin <= 2.11.14 - Sensitive Data Exposure vulnerability
CVE-2026-66449
WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66450
WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability
CVE-2026-28168
WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability