← All credits
Bonds | Patchstack Bug Bounty Program
476 vulnerability records and advisories credit this contributor.
CVE-2025-27014
WordPress Hostiko Theme < 30.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-27015
WordPress Hostiko Theme < 30.1 - Local File Inclusion vulnerability
CVE-2025-26986
WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerability
CVE-2025-25174
WordPress BeeTeam368 Extensions Plugin <= 1.9.4 - Local File Inclusion Vulnerability
CVE-2025-25172
WordPress VidMov <= 1.9.4 - Local File Inclusion Vulnerability
CVE-2025-24779
WordPress Yogi theme < 2.9.3 - PHP Object Injection Vulnerability
CVE-2025-22728
WordPress Workreap (theme's plugin) plugin <= 3.3.6 - SQL Injection vulnerability
CVE-2025-22726
WordPress nK Themes Helper plugin <= 1.7.9 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-22322
WordPress Private Messages for UserPro plugin <= 4.10.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22311
WordPress Private Messages for UserPro plugin <= 4.10.0 - Local File Inclusion vulnerability