← All credits
daroo | Patchstack Bug Bounty Program
283 vulnerability records and advisories credit this contributor.
CVE-2026-56005
WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-12256
WordPress Fusion Builder plugin <= 3.15.3 - PHP Object Injection vulnerability
CVE-2026-97271
WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96350
WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability
CVE-2026-49076
WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability
CVE-2026-93774
WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerability
CVE-2026-95529
WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-95601
WordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerability
CVE-2026-84820
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability
CVE-2026-84812
WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability