Bug Bounty
2026
- 08-26: Quiz and Survey Master Stored XSS via question_title - Wordfence bug bounty, $0
- 08-26: UsersWP Badge Widget Stored XSS via Variable Substitution - Wordfence bug bounty, $72
- 07-26: Essential Addons for Elementor Global Reading Progress Stored XSS - Wordfence bug bounty, $96
- 07-26: Essential Addons for Elementor Email Header Injection to Account Takeover - Wordfence bug bounty, $859
- 07-26: Contact Form Entries Arbitrary File Copy to File Read - Wordfence bug bounty, $100
- 06-26: Survey Maker Time-Based Answer Stored XSS - Wordfence bug bounty, $0
- 06-26: Photo Gallery Compact Album Second-Order Blind SQL Injection - Wordfence bug bounty, $60
- 06-26: ProfileGrid Stored XSS via Private Messages - Wordfence bug bounty, $37
- 05-26: ProfileGrid Arbitrary Group Joining - Wordfence bug bounty, $0
- 05-26: ProfileGrid rid SQL Injection - Wordfence bug bounty, $31
- 04-26: Elementor REST API Stored XSS - Wordfence bug bounty, $288
2025