Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
WordPress Foundation CVE-2026-119977
WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-p
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
WordPress Foundation CVE-2026-114570
WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user disp
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit