MainWP Program Statistics
5 total issues disclosed
$250 total paid publicly
Most disclosed (5 disclosures) — Cross-site Scripting (XSS) - Reflected
Disclosed Reports
| Report Title | Vulnerability Type | Disclosed By | Severity | Disclosed on |
|---|---|---|---|---|
| Reflected XSS in "Cost Tracker" Notes Field | Cross-site Scripting (XSS) - Reflected | rishail01 | Low | 2025-07-17 |
| Reflected XSS in "Manage Tags" Notes Field | Cross-site Scripting (XSS) - Reflected | rishail01 | Low | 2025-07-17 |
| Reflected XSS in "Create Category" Functionality of Post Creation Module | Cross-site Scripting (XSS) - Reflected | rishail01 | Low | 2025-07-17 |
| Stored Cross-Site Scripting (XSS) in "Add Contact" Name Field – MainWP Plugin | Cross-site Scripting (XSS) - Reflected | rishail01 | No rating | 2025-07-17 |
| Reflected XSS in "Client Notes" Field | Cross-site Scripting (XSS) - Reflected | rishail01 | Low | 2025-07-13 |
Getting started
Learn about vulnerability types
Getting started in bug bounties
Test your knowledge
Free Web Application Challenges
Guides for your hunts
ZSeano's Methodology
Effective Note Taking for bug bounties
Useful Resources
Disclosed HackerOne Reports
Our community
Endorsed Members
Hackevents
Member Articles