← All credits
Bonds | Patchstack Bug Bounty Program
450 vulnerability records and advisories credit this contributor.
CVE-2025-22728
WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability
CVE-2025-22726
WordPress nK Themes Helper plugin <= 1.7.9 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-22322
WordPress Private Messages for UserPro plugin <= 4.10.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22311
WordPress Private Messages for UserPro plugin <= 4.10.0 - Local File Inclusion vulnerability
CVE-2025-22282
WordPress ez Form Calculator Premouium plugin <= 2.14.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56265
WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-54383
WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability
CVE-2024-54273
WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability
CVE-2024-54263
WordPress Spirit Framework plugin <= 1.2.13 - Local File Inclusion vulnerability
CVE-2024-53740
WordPress WooCommerce Ultimate Gift Card plugin < 2.9.1 - Reflected Cross Site Scripting (XSS) vulnerability