← All credits
Bonds | Patchstack Bug Bounty Program
450 vulnerability records and advisories credit this contributor.
CVE-2025-49885
WordPress Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin <= 5.0.6 - Arbitrary File Upload Vulnerability
CVE-2025-39508
WordPress Nasa Core Plugin <= 6.4.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49295
WordPress MediClinic theme <= 2.1 - Local File Inclusion Vulnerability
CVE-2025-49297
WordPress Grill and Chow theme <= 1.6 - Local File Inclusion Vulnerability
CVE-2025-48292
WordPress Tourmaster plugin <= 5.3.8 - Local File Inclusion vulnerability
CVE-2025-39501
WordPress Goodlayers Hostel plugin <= 3.1.4 - SQL Injection vulnerability
CVE-2024-49655
WordPress ARPrice plugin <= 4.1.3 - Unauthenticated SQL Injection vulnerability
CVE-2024-49700
WordPress ARPrice plugin <= 4.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-49666
WordPress ARPrice plugin <= 4.1.3 - SQL Injection vulnerability
CVE-2024-49688
WordPress ARPrice plugin <= 4.1.3 - Unauthenticated PHP Object Injection vulnerability