Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

formassembly

HackerOneView on HackerOne
RawAI Enhanced
7
In Scope
4
Out of Scope
Scope Changes (33)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedtypeahead.formassembly.comURLIn Scope19:08
Addedhttps://wordpress.org/plugins/formassembly-web-formsOTHERIn Scope19:08
Added*.formassembly.comWILDCARDOut of Scope19:08
Added*.tfaforms.comWILDCARDOut of Scope19:08
Added*.veerwest.comWILDCARDOut of Scope19:08
Addedappsecfa.tfaforms.netURLIn Scope19:08
Addedformassembly.comURLIn Scope19:08
Added1120698698IOSIn Scope19:08
Addedwww.formassembly.comURLIn Scope19:08
Added*.tfaforms.netWILDCARDOut of Scope19:08
Addedapp.formassembly.comURLIn Scope19:08
Feb 22, 2026
ChangeAssetCategoryScopeTime
Added*.formassembly.comWILDCARDOut of Scope00:40
Added*.tfaforms.comWILDCARDOut of Scope00:40
Added*.tfaforms.netWILDCARDOut of Scope00:40
Addedapp.formassembly.comURLIn Scope00:40
Addedtypeahead.formassembly.comURLIn Scope00:40
Added*.veerwest.comWILDCARDOut of Scope00:40
Addedappsecfa.tfaforms.netURLIn Scope00:40
Addedformassembly.comURLIn Scope00:40
Added1120698698IOSIn Scope00:40
Addedwww.formassembly.comURLIn Scope00:40
Addedhttps://wordpress.org/plugins/formassembly-web-formsURLIn Scope00:40
Feb 21, 2026
ChangeAssetCategoryScopeTime
Addedappsecfa.tfaforms.netURLIn Scope19:11
Addedapp.formassembly.comURLIn Scope19:11
Addedformassembly.comURLIn Scope19:11
Added1120698698IOSIn Scope19:11
Addedtypeahead.formassembly.comURLIn Scope19:11
Addedwww.formassembly.comURLIn Scope19:11
Addedhttps://wordpress.org/plugins/formassembly-web-formsOTHERIn Scope19:11
Added*.formassembly.comWILDCARDOut of Scope19:11
Added*.tfaforms.comWILDCARDOut of Scope19:11
Added*.tfaforms.netWILDCARDOut of Scope19:11
Added*.veerwest.comWILDCARDOut of Scope19:11