← All credits
Bonds | Patchstack Bug Bounty Program
450 vulnerability records and advisories credit this contributor.
CVE-2026-49052
WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability
CVE-2026-34889
WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32542
WordPress Fusion Builder plugin < 3.15.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-32535
WordPress JS Help Desk plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-32534
WordPress JS Help Desk plugin <= 3.0.3 - SQL Injection vulnerability
CVE-2026-32454
WordPress Avada Core plugin < 5.15.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32453
WordPress Avada Core plugin < 5.15.0 - Broken Access Control vulnerability
CVE-2026-32452
WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability
CVE-2026-32451
WordPress Fusion Builder plugin < 3.15.0 - Broken Access Control vulnerability
CVE-2026-28132
WordPress WooCommerce Photo Reviews plugin <= 1.4.4 - Content Injection vulnerability