Filtered by category: WordFence, tag: vulnerability disclosure × Clear
Wordfence Bug Bounty Program Monthly Report – June 2026
Matched: WordPress
Wordfence's June 2026 bug bounty report logged 1,066 vulnerability submissions from 306 researchers. Of these, 185 were accepted as in-scope. Total bounties paid reached $42,553, with the top single award of $5,200 going to a researcher who found an authentication bypass in UpdraftPlus affecting 4 million sites. Key findings included remote code execution in Everest Forms Pro, privilege escalation in Kirki, and a supply chain compromise affecting ShapedPlugin plugins.