Wordfence's Bug Bounty Program offers up to $31,200 per vulnerability for reporting security issues in WordPress plugins/themes. Last week, 359 vulnerabilities were disclosed in 326 plugins and 23 themes. The report emphasizes the availability of vulnerability data to enhance internet security, offering free access to various tools and databases. Enhanced firewall protections were deployed for certain vulnerabilities. Out of 359 vulnerabilities, 114 were patched while 245 remained unpatched, with various severity ratings reported. Additionally, 67 researchers contributed to WordPress security, with the top contributors listed. The report highlights the importance of vulnerability reporting and encourages participation in the Bug Bounty Program.
Wordfence Intelligence Weekly WordPress Vulnerability Report (January 6, 2025 to January 12, 2025)
