← All credits
Bonds | Patchstack Bug Bounty Program
450 vulnerability records and advisories credit this contributor.
CVE-2025-47581
WordPress WordPress Events Calendar Registration & Tickets plugin <= 2.6.0 - PHP Object Injection vulnerability
CVE-2025-47571
WordPress Super Store Finder plugin < 7.8 - Local File Inclusion vulnerability
CVE-2025-47570
WordPress WooCommerce Photo Reviews plugin <= 1.3.13 - Cross Site Scripting (XSS) vulnerability
CVE-2025-47568
WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability
CVE-2025-39508
WordPress Nasa Core Plugin <= 6.4.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-39507
WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability
CVE-2025-39506
WordPress Nasa Core Plugin <= 6.3.2 - Local File Inclusion vulnerability
CVE-2025-39505
WordPress Goodlayers Hotel plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-39504
WordPress Goodlayers Hotel plugin <= 3.1.4 - SQL Injection vulnerability
CVE-2025-39503
WordPress Goodlayers Hotel plugin <= 3.1.4 - PHP Object Injection vulnerability