← All credits
Bonds | Patchstack Bug Bounty Program
450 vulnerability records and advisories credit this contributor.
CVE-2024-52409
WordPress AJAX Random Posts plugin <= 0.3.3 - PHP Object Injection vulnerability
CVE-2024-50555
WordPress Elementor Website Builder plugin <= 3.29.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-50506
WordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Privilege Escalation vulnerability
CVE-2024-50484
WordPress Multi Purpose Mail Form plugin <= 1.0.2 - Arbitrary File Upload vulnerability
CVE-2024-50483
WordPress Meetup plugin <= 0.1 - Broken Authentication vulnerability
CVE-2024-50482
WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Upload vulnerability
CVE-2024-49700
WordPress ARPrice plugin <= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-49699
WordPress ARPrice plugin <= 4.1.3 - PHP Object Injection vulnerability
CVE-2024-49688
WordPress ARPrice plugin <= 4.1.3 - Unauthenticated PHP Object Injection vulnerability
CVE-2024-49666
WordPress ARPrice plugin <= 4.1.3 - SQL Injection vulnerability