← All credits
daroo | Patchstack Bug Bounty Program
278 vulnerability records and advisories credit this contributor.
CVE-2026-84820
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability
CVE-2026-84812
WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability
CVE-2026-84752
WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability
CVE-2026-82224
WordPress SliceWP plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-81298
WordPress LeadConnector plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78285
WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability
CVE-2026-78283
WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78257
WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability
CVE-2026-78282
WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66650
WordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerability