← All credits
Bonds | Patchstack Bug Bounty Program
450 vulnerability records and advisories credit this contributor.
CVE-2025-67923
WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67588
WordPress Elementor Website Builder plugin <= 3.33.0 - Broken Access Control vulnerability
CVE-2025-67587
WordPress WP Gravity Forms FreshDesk Plugin plugin <= 1.3.5 - Open Redirection vulnerability
CVE-2025-64355
WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64287
WordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerability
CVE-2025-64251
WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbitrary Content Deletion vulnerability
CVE-2025-64226
WordPress Stockie Extra plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-64225
WordPress Stockie Extra plugin <= 1.2.11 - Content Injection vulnerability
CVE-2025-64224
WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64221
WordPress Reservation Plugin plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability