Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
shutterfly_vdp
35
In Scope
2
Out of Scope
In-Scope Assets (35)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.lifetouch.com | WILDCARD | No | ||
| *.photoccino.com | WILDCARD | No | ||
| *.sbs.shutterfly.com | WILDCARD | No | ||
| *.sf-cdn.com | WILDCARD | No | ||
| *.shutterfly.com | WILDCARD | No | ||
| *.snapfish.com | WILDCARD | No | ||
| Snapfish Photo Tile Wall Decor / com.snapfish-llc.SnapfishExpress | IOS | No | - | |
| Snapfish: Photos Cards & Books / com.hp.Snapfish | IOS | No | - | |
| Snapfish: Prints + Photo Books / com.snapfish.mobile | ANDROID | No | - | |
| admin.spoonflower.com | URL | No | ||
| api-gateway.spoonflower.com | URL | No | ||
| blog.spoonflower.com | URL | No | ||
| cart.spoonflower.com | URL | No | ||
| com.shutterfly | ANDROID | No | ||
| com.shutterfly.ShutterflyUploader | IOS | No | - | |
| https://www.cvs.com/photo/ | URL | No | ||
| jcpportraits.com | URL | No | ||
| lifetouch.com | URL | No | ||
| photo.walgreens.com | URL | No | ||
| preschoolsmiles.com | URL | No | ||
| prestigeportraits.com | URL | No | ||
| shutterfly-prod.auth.us-east-1.amazoncognito.com | URL | No | ||
| shutterfly.com | URL | No | ||
| snapfish.co.nz | URL | No | ||
| snapfish.co.uk | URL | No | ||
| snapfish.com | URL | No | ||
| snapfish.com.au | URL | No | ||
| snapfish.de | URL | No | ||
| snapfish.fr | URL | No | ||
| snapfish.ie | URL | No | ||
| snapfish.it | URL | No | ||
| staging.spoonflower.com | URL | No | ||
| tinyprints.com | URL | No | ||
| wgwebservices.snapfish.com | URL | No | ||
| www.spoonflower.com | URL | No |
Out-of-Scope Assets (2)
| Asset | Category | Bounty | |
|---|---|---|---|
| https://*.cvs.com/ | WILDCARD | No | |
| https://*.walgreens.com/ | WILDCARD | No |
Scope Changes (111)
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | staging.spoonflower.com | URL | In Scope | 21:23 |
| Added | shutterfly-prod.auth.us-east-1.amazoncognito.com | URL | In Scope | 21:23 |
| Added | www.spoonflower.com | URL | In Scope | 21:23 |
| Added | cart.spoonflower.com | URL | In Scope | 21:23 |
| Added | api-gateway.spoonflower.com | URL | In Scope | 21:23 |
| Added | admin.spoonflower.com | URL | In Scope | 21:23 |
| Added | snapfish: prints + photo books / com.snapfish.mobile | ANDROID | In Scope | 20:23 |
| Added | snapfish.co.nz | URL | In Scope | 20:23 |
| Added | prestigeportraits.com | URL | In Scope | 20:23 |
| Added | snapfish.com | URL | In Scope | 20:23 |
| Added | *.lifetouch.com | WILDCARD | In Scope | 20:23 |
| Added | *.cvs.com | WILDCARD | Out of Scope | 20:23 |
| Added | *.shutterfly.com | WILDCARD | In Scope | 20:23 |
| Added | lifetouch.com | URL | In Scope | 20:23 |
| Added | snapfish photo tile wall decor / com.snapfish-llc.snapfishexpress | IOS | In Scope | 20:23 |
| Added | https://www.cvs.com/photo | URL | Out of Scope | 20:23 |
| Added | *.photoccino.com | WILDCARD | In Scope | 20:23 |
| Added | preschoolsmiles.com | URL | In Scope | 20:23 |
| Added | snapfish.it | URL | In Scope | 20:23 |
| Added | *.sf-cdn.com | WILDCARD | In Scope | 20:23 |
| Added | jcpportraits.com | URL | In Scope | 20:23 |
| Added | shutterfly.com | URL | In Scope | 20:23 |
| Added | snapfish.ie | URL | In Scope | 20:23 |
| Added | snapfish.co.uk | URL | In Scope | 20:23 |
| Added | photo.walgreens.com | URL | In Scope | 20:23 |
| Added | *.sbs.shutterfly.com | WILDCARD | In Scope | 20:23 |
| Added | com.shutterfly.shutterflyuploader | IOS | In Scope | 20:23 |
| Added | snapfish: photos cards & books / com.hp.snapfish | IOS | In Scope | 20:23 |
| Added | snapfish.de | URL | In Scope | 20:23 |
| Added | snapfish.com.au | URL | In Scope | 20:23 |
| Added | *.snapfish.com | WILDCARD | In Scope | 20:23 |
| Added | *.walgreens.com | WILDCARD | Out of Scope | 20:23 |
| Added | tinyprints.com | URL | In Scope | 20:23 |
| Added | blog.spoonflower.com | URL | In Scope | 20:23 |
| Added | com.shutterfly | ANDROID | In Scope | 20:23 |
| Added | snapfish.fr | URL | In Scope | 20:23 |
| Added | wgwebservices.snapfish.com | URL | In Scope | 20:23 |
Feb 24, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | cart.spoonflower.com | URL | In Scope | 04:16 |
| Added | api-gateway.spoonflower.com | URL | In Scope | 04:16 |
Feb 23, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | api-gateway.spoonflower.com | URL | In Scope | 23:16 |
| Added | cart.spoonflower.com | URL | In Scope | 23:16 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | snapfish: prints + photo books / com.snapfish.mobile | ANDROID | In Scope | 00:42 |
| Added | com.shutterfly | ANDROID | In Scope | 00:42 |
| Added | tinyprints.com | URL | In Scope | 00:42 |
| Added | snapfish.com.au | URL | In Scope | 00:42 |
| Added | *.sbs.shutterfly.com | WILDCARD | In Scope | 00:42 |
| Added | blog.spoonflower.com | URL | In Scope | 00:42 |
| Added | jcpportraits.com | URL | In Scope | 00:42 |
| Added | prestigeportraits.com | URL | In Scope | 00:42 |
| Added | *.shutterfly.com | WILDCARD | In Scope | 00:42 |
| Added | snapfish.it | URL | In Scope | 00:42 |
| Added | photo.walgreens.com | URL | In Scope | 00:42 |
| Added | *.lifetouch.com | WILDCARD | In Scope | 00:42 |
| Added | *.photoccino.com | WILDCARD | In Scope | 00:42 |
| Added | snapfish photo tile wall decor / com.snapfish-llc.snapfishexpress | IOS | In Scope | 00:42 |
| Added | com.shutterfly.shutterflyuploader | IOS | In Scope | 00:42 |
| Added | snapfish: photos cards & books / com.hp.snapfish | IOS | In Scope | 00:42 |
| Added | snapfish.co.nz | URL | In Scope | 00:42 |
| Added | snapfish.com | URL | In Scope | 00:42 |
| Added | snapfish.ie | URL | In Scope | 00:42 |
| Added | snapfish.co.uk | URL | In Scope | 00:42 |
| Added | wgwebservices.snapfish.com | URL | In Scope | 00:42 |
| Added | www.spoonflower.com | URL | In Scope | 00:42 |
| Added | lifetouch.com | URL | In Scope | 00:42 |
| Added | shutterfly.com | URL | In Scope | 00:42 |
| Added | *.sf-cdn.com | WILDCARD | In Scope | 00:42 |
| Added | *.cvs.com | WILDCARD | Out of Scope | 00:42 |
| Added | snapfish.de | URL | In Scope | 00:42 |
| Added | snapfish.fr | URL | In Scope | 00:42 |
| Added | *.snapfish.com | WILDCARD | In Scope | 00:42 |
| Added | https://www.cvs.com/photo | URL | In Scope | 00:42 |
| Added | admin.spoonflower.com | URL | In Scope | 00:42 |
| Added | staging.spoonflower.com | URL | In Scope | 00:42 |
| Added | shutterfly-prod.auth.us-east-1.amazoncognito.com | URL | In Scope | 00:42 |
| Added | *.walgreens.com | WILDCARD | Out of Scope | 00:42 |
| Added | preschoolsmiles.com | URL | In Scope | 00:42 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | blog.spoonflower.com | URL | In Scope | 19:12 |
| Added | *.shutterfly.com | WILDCARD | In Scope | 19:12 |
| Added | lifetouch.com | URL | In Scope | 19:12 |
| Added | jcpportraits.com | URL | In Scope | 19:12 |
| Added | prestigeportraits.com | URL | In Scope | 19:12 |
| Added | preschoolsmiles.com | URL | In Scope | 19:12 |
| Added | shutterfly.com | URL | In Scope | 19:12 |
| Added | com.shutterfly.shutterflyuploader | IOS | In Scope | 19:12 |
| Added | com.shutterfly | ANDROID | In Scope | 19:12 |
| Added | tinyprints.com | URL | In Scope | 19:12 |
| Added | snapfish: photos cards & books / com.hp.snapfish | IOS | In Scope | 19:12 |
| Added | snapfish: prints + photo books / com.snapfish.mobile | ANDROID | In Scope | 19:12 |
| Added | snapfish photo tile wall decor / com.snapfish-llc.snapfishexpress | IOS | In Scope | 19:12 |
| Added | snapfish.com | URL | In Scope | 19:12 |
| Added | snapfish.de | URL | In Scope | 19:12 |
| Added | snapfish.fr | URL | In Scope | 19:12 |
| Added | snapfish.ie | URL | In Scope | 19:12 |
| Added | snapfish.it | URL | In Scope | 19:12 |
| Added | snapfish.co.uk | URL | In Scope | 19:12 |
| Added | snapfish.com.au | URL | In Scope | 19:12 |
| Added | snapfish.co.nz | URL | In Scope | 19:12 |
| Added | photo.walgreens.com | URL | In Scope | 19:12 |
| Added | *.snapfish.com | WILDCARD | In Scope | 19:12 |
| Added | *.sf-cdn.com | WILDCARD | In Scope | 19:12 |
| Added | wgwebservices.snapfish.com | URL | In Scope | 19:12 |
| Added | https://www.cvs.com/photo | URL | In Scope | 19:12 |
| Added | *.lifetouch.com | WILDCARD | In Scope | 19:12 |
| Added | *.photoccino.com | WILDCARD | In Scope | 19:12 |
| Added | *.sbs.shutterfly.com | WILDCARD | In Scope | 19:12 |
| Added | www.spoonflower.com | URL | In Scope | 19:12 |
| Added | admin.spoonflower.com | URL | In Scope | 19:12 |
| Added | staging.spoonflower.com | URL | In Scope | 19:12 |
| Added | shutterfly-prod.auth.us-east-1.amazoncognito.com | URL | In Scope | 19:12 |
| Added | *.cvs.com | WILDCARD | Out of Scope | 19:12 |
| Added | *.walgreens.com | WILDCARD | Out of Scope | 19:12 |