🦸 👻 Calling all superheroes and haunters! Introducing the Cybersecurity Month Spooktacular Haunt and the WordPress Superhero Challenge for the Wordfence Bug Bounty Program! Through November 11th, 2024, all in-scope vulnerability types for WordPress plugins/themes with >= 1,000 active installations are in-scope for ALL researchers, top-tier researchers earn automatic bonuses of between 10% to 120% for valid submissions, pending report limits are increased for all, and it's possible to earn up to $31,200 for high impact vulnerabilities!
Review what's in scope for your tier and updated bounties with bonuses here!
Title | Number of Vulnerabilities | Last Vulnerability |
---|---|---|
Ni Purchase Order(PO) For WooCommerce | 1 | September 26, 2023 |
Track The Click | 1 | September 26, 2023 |
Block Plugin Update | 1 | September 27, 2023 |
Font Awesome Integration | 1 | September 27, 2023 |
Font Awesome More Icons | 1 | September 27, 2023 |
Magic Action Box | 1 | September 27, 2023 |
TM WooCommerce Compare & Wishlist | 1 | September 27, 2023 |
Woocommerce ESTO | 1 | September 27, 2023 |
bbp style pack | 2 | September 28, 2023 |
Blocks | 1 | September 28, 2023 |
BuddyMeet | 1 | September 28, 2023 |
Events Rich Snippets for Google | 1 | September 28, 2023 |
Kv TinyMCE Editor Add Fonts | 1 | September 28, 2023 |
Onclick show popup | 2 | September 28, 2023 |
Popup contact form | 2 | September 28, 2023 |
Tiny Carousel Horizontal Slider | 1 | September 28, 2023 |
Advanced Custom Fields: Extended | 2 | September 29, 2023 |
Backend Localization | 3 | September 29, 2023 |
Comments by Startbit | 1 | September 29, 2023 |
Contact Form | 1 | September 29, 2023 |
Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!
Learn moreWant to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.
The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.
Documentation