Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Bug Bounty Intelligence

Source: HackerOne public disclosures · updated every 6h

Browse publicly disclosed bug bounty reports from HackerOne. Filter by severity, weakness type, or program. Cross-referenced with CVE IDs where available.

Disclosed Reports
12,219
CVE-linked
1,854
Programs
342
New This Week
11
Program filter: wordpress
Stored XSS in WordPress
WordPress Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2018-02-02
Medium
2017-12-26
Authenticated Cross-site Scripting in Template Name
WordPress Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-11-18
Medium
2017-11-02
Medium
2017-07-26
Infrastructure - Photon - SSRF
WordPress Server-Side Request Forgery (SSRF) (CWE-918)
Medium
2017-07-17
Medium
2017-06-14
DOM Based XSS In mercantile.wordpress.org
WordPress Cross-site Scripting (XSS) - DOM (CWE-79)
Medium
2017-06-14
XSS in the search bar of mercantile.wordpress.org
WordPress Cross-site Scripting (XSS) - Reflected (CWE-79)
Medium
2017-05-20
Top Weakness Types
Most Active Programs
ProgramReportsMax $
U.S. Dept Of Defense896
Internet Bug Bounty817
HackerOne609
Nextcloud582
Shopify464
curl439
Node.js third-party modules307
GitLab258
X / xAI250 $2,500
Uber239 $9,895