← All credits
Bonds | Patchstack Bug Bounty Program
450 vulnerability records and advisories credit this contributor.
CVE-2025-48290
WordPress Kinsley theme <= 3.4.4 - Local File Inclusion vulnerability
CVE-2025-47696
WordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability
CVE-2025-47694
WordPress Blog Designer PRO plugin <= 3.4.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-47581
WordPress WordPress Events Calendar Registration & Tickets plugin <= 2.6.0 - PHP Object Injection vulnerability
CVE-2025-47570
WordPress WooCommerce Photo Reviews plugin <= 1.3.13 - Cross Site Scripting (XSS) vulnerability
CVE-2025-47571
WordPress Super Store Finder plugin < 7.8 - Local File Inclusion vulnerability
CVE-2025-47569
WordPress WooCommerce Ultimate Gift Card plugin <= 2.9.6 - SQL Injection vulnerability
CVE-2025-47568
WordPress ZoomSounds plugin <= 6.91 - PHP Object Injection vulnerability
CVE-2025-4414
WordPress CMSMasters Content Composer plugin < 2.5.7 - Local File Inclusion vulnerability
CVE-2025-39506
WordPress Nasa Core Plugin <= 6.3.2 - Local File Inclusion vulnerability