← All credits
daroo | Patchstack Bug Bounty Program
289 vulnerability records and advisories credit this contributor.
CVE-2026-59542
WordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability
CVE-2026-27392
WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-27391
WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-57702
WordPress Amelia plugin <= 2.4.2 - SQL Injection vulnerability
CVE-2026-57816
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57814
WordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57363
WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57715
WordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57706
WordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57741
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.0 - Cross Site Scripting (XSS) vulnerability