← All credits
Bonds | Patchstack Bug Bounty Program
450 vulnerability records and advisories credit this contributor.
CVE-2025-64637
WordPress Auros Core plugin <= 5.3.1 - Content Injection vulnerability
CVE-2026-57320
WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57314
WordPress SureCart plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68052
WordPress Eagle Booking plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-69158
WordPress Granola theme <= 1.13 - Local File Inclusion vulnerability
CVE-2026-49084
WordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerability
CVE-2026-22338
WordPress EcoBlue theme <= 1.15 - Local File Inclusion vulnerability
CVE-2025-69161
WordPress Snowy theme <= 1.13 - Local File Inclusion vulnerability
CVE-2025-69145
WordPress Gat theme <= 1.16 - Local File Inclusion vulnerability
CVE-2025-69166
WordPress Gunslinger theme <= 1.7 - Local File Inclusion vulnerability