← All credits
Bonds | Patchstack Bug Bounty Program
450 vulnerability records and advisories credit this contributor.
CVE-2026-39710
WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-65524
WordPress Avada Custom Branding plugin <= 1.2 - Broken Access Control vulnerability
CVE-2026-49782
WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability
CVE-2025-58707
WordPress Spin theme <= 1.8 - Local File Inclusion vulnerability
CVE-2025-58705
WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerability
CVE-2025-53440
WordPress Confidant theme <= 1.4 - Local File Inclusion vulnerability
CVE-2026-57729
WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability
CVE-2026-57728
WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-57745
WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-57744
WordPress RT-Theme 18 | Extensions plugin <= 2.5 - PHP Object Injection vulnerability