Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
These 2 releases credit 1 lines.
1 are still open to claim.
One mark per credit line
Open
Claimed
-
Tournamatch CVE-2026-121380
The Tournamatch WordPress plugin before 4.7.1 does not restrict access to its team invitation listing, allowing unauthenticated users to retrieve the email addr
0 CVEs and 0 credit lines.
-
Tournamatch CVE-2026-121379
The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile or team image before deleting it when a new
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit