← All credits
daroo | Patchstack Bug Bounty Program
289 vulnerability records and advisories credit this contributor.
CVE-2026-65549
WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability
CVE-2026-65508
WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability
CVE-2026-61964
WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28141
WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28005
WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerability
CVE-2026-66447
WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability
CVE-2026-65443
WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65437
WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.82 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65440
WordPress GetGenie plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59558
WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability