← All credits
Bonds | Patchstack Bug Bounty Program
450 vulnerability records and advisories credit this contributor.
CVE-2026-24959
WordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability
CVE-2026-23543
WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerability
CVE-2025-69333
WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability
CVE-2025-69095
WordPress Reservation Plugin plugin <= 1.7 - Settings Change vulnerability
CVE-2025-69074
WordPress Pearson Specter theme <= 1.11.3 - Local File Inclusion vulnerability
CVE-2025-69034
WordPress Lekker theme <= 1.8 - Local File Inclusion vulnerability
CVE-2025-68975
WordPress Eagle Booking plugin <= 1.3.4.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-68976
WordPress Eagle Booking plugin <= 1.3.4.3 - Settings Change vulnerability
CVE-2025-68504
WordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68502
WordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerability