wordpress

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (21)

Asset	Category	Bounty	Quick Links
*.buddypress.org,bbpress.org,profiles.wordpress.org	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
.trac.wordpress.org, .svn.wordpress.org, *.git.wordpress.org, github.com/WordPress	CODE	Yes	-
*.wordcamp.org	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.wordpress.net	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.wordpress.org	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
BBPress Core	CODE	Yes	-
BuddyPress Core	CODE	Yes	-
GlotPress	CODE	Yes	-
Gutenberg	CODE	Yes	-
Official WordPress plugins	CODE	Yes	-
WP-CLI	CODE	Yes	-
WordPress Core	CODE	Yes	-
api.wordpress.org	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
codex.wordpress.org,codex.bbpress.org,codex.buddypress.org	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
doaction.org	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
irclogs.wordpress.org	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
lists.wordpress.org	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
mercantile.wordpress.org	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
munin-*.wordpress.org	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
planet.wordpress.org	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
wordpressfoundation.org	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (7)

Asset	Category	Bounty
*.wordpress.com	WILDCARD	No
335703880	IOS	No
Archived GitHub repositories	OTHER	No
Digital Ocean, AWS, etc	OTHER	No
https://github.com/wordpress-mobile/	CODE	No
org.wordpress.android	ANDROID	No
status.wordpress.org,glotpress.blog,wordpress.tv	URL	No

Scope Changes (134)

Mar 26, 2026

Change	Asset	Category	Scope	Time
Removed	wordpressfoundation.org	URL	In Scope	16:06
Added	munin-*.wordpress.org	WILDCARD	In Scope	16:06
Removed	munin-*.wordpress.org	WILDCARD	In Scope	16:06
Added	buddypress core	CODE	In Scope	16:06
Removed	buddypress core	URL	In Scope	16:06
Removed	*.wordcamp.org	WILDCARD	In Scope	16:06
Removed	.trac.wordpress.org, .svn.wordpress.org, *.git.wordpress.org, github.com/wordpress	CODE	In Scope	16:06
Removed	.trac.wordpress.org, .svn.wordpress.org, *.git.wordpress.org, github.com/wordpress	CODE	In Scope	16:06
Removed	.trac.wordpress.org, .svn.wordpress.org, *.git.wordpress.org, github.com/wordpress	CODE	In Scope	16:06
Removed	.trac.wordpress.org, .svn.wordpress.org, *.git.wordpress.org, github.com/wordpress	CODE	In Scope	16:06
Removed	irclogs.wordpress.org	URL	In Scope	16:06
Removed	*.wordpress.net	WILDCARD	In Scope	16:06
Removed	doaction.org	URL	In Scope	16:06
Removed	wp-cli	CODE	In Scope	16:06
Added	wordpress core	CODE	In Scope	16:06
Removed	wordpress core	URL	In Scope	16:06
Added	gutenberg	CODE	In Scope	16:06
Removed	gutenberg	CODE	In Scope	16:06
Removed	digital ocean, aws, etc	OTHER	Out of Scope	16:06
Removed	*.wordpress.com	WILDCARD	Out of Scope	16:06
Removed	status.wordpress.org,glotpress.blog,wordpress.tv	URL	Out of Scope	16:06
Removed	status.wordpress.org,glotpress.blog,wordpress.tv	URL	Out of Scope	16:06
Removed	status.wordpress.org,glotpress.blog,wordpress.tv	URL	Out of Scope	16:06
Removed	335703880	IOS	Out of Scope	16:06
Removed	org.wordpress.android	ANDROID	Out of Scope	16:06
Removed	glotpress	CODE	In Scope	16:06
Removed	official wordpress plugins	CODE	In Scope	16:06
Added	bbpress core	CODE	In Scope	16:06
Removed	bbpress core	URL	In Scope	16:06
Removed	*.wordpress.org	WILDCARD	In Scope	16:06
Removed	api.wordpress.org	URL	In Scope	16:06
Removed	codex.wordpress.org,codex.bbpress.org,codex.buddypress.org	URL	In Scope	16:06
Removed	codex.wordpress.org,codex.bbpress.org,codex.buddypress.org	URL	In Scope	16:06
Removed	codex.wordpress.org,codex.bbpress.org,codex.buddypress.org	URL	In Scope	16:06
Removed	mercantile.wordpress.org	URL	In Scope	16:06
Removed	lists.wordpress.org	URL	In Scope	16:06
Removed	*.buddypress.org,bbpress.org,profiles.wordpress.org	WILDCARD	In Scope	16:06
Removed	*.buddypress.org,bbpress.org,profiles.wordpress.org	WILDCARD	In Scope	16:06
Removed	*.buddypress.org,bbpress.org,profiles.wordpress.org	WILDCARD	In Scope	16:06
Removed	planet.wordpress.org	URL	In Scope	16:06
Removed	https://github.com/wordpress-mobile	URL	Out of Scope	16:06
Removed	archived github repositories	OTHER	Out of Scope	16:06

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	codex.wordpress.org,codex.bbpress.org,codex.buddypress.org	URL	In Scope	19:08
Added	codex.wordpress.org,codex.bbpress.org,codex.buddypress.org	URL	In Scope	19:08
Added	codex.wordpress.org,codex.bbpress.org,codex.buddypress.org	URL	In Scope	19:08
Added	lists.wordpress.org	URL	In Scope	19:08
Added	*.wordpress.com	WILDCARD	Out of Scope	19:08
Added	335703880	IOS	Out of Scope	19:08
Added	archived github repositories	OTHER	Out of Scope	19:08
Added	wp-cli	CODE	In Scope	19:08
Added	official wordpress plugins	CODE	In Scope	19:08
Added	munin-*.wordpress.org	WILDCARD	In Scope	19:08
Added	*.wordpress.org	WILDCARD	In Scope	19:08
Added	.trac.wordpress.org, .svn.wordpress.org, *.git.wordpress.org, github.com/wordpress	CODE	In Scope	19:08
Added	.trac.wordpress.org, .svn.wordpress.org, *.git.wordpress.org, github.com/wordpress	CODE	In Scope	19:08
Added	buddypress core	URL	In Scope	19:08
Added	irclogs.wordpress.org	URL	In Scope	19:08
Added	doaction.org	URL	In Scope	19:08
Added	glotpress	CODE	In Scope	19:08
Added	wordpress core	URL	In Scope	19:08
Added	bbpress core	URL	In Scope	19:08
Added	api.wordpress.org	URL	In Scope	19:08
Added	*.buddypress.org,bbpress.org,profiles.wordpress.org	WILDCARD	In Scope	19:08
Added	*.buddypress.org,bbpress.org,profiles.wordpress.org	WILDCARD	In Scope	19:08
Added	*.buddypress.org,bbpress.org,profiles.wordpress.org	WILDCARD	In Scope	19:08
Added	planet.wordpress.org	URL	In Scope	19:08
Added	*.wordpress.net	WILDCARD	In Scope	19:08
Added	gutenberg	CODE	In Scope	19:08
Added	wordpressfoundation.org	URL	In Scope	19:08
Added	*.wordcamp.org	WILDCARD	In Scope	19:08
Added	mercantile.wordpress.org	URL	In Scope	19:08
Added	digital ocean, aws, etc	OTHER	Out of Scope	19:08
Added	status.wordpress.org,glotpress.blog,wordpress.tv	URL	Out of Scope	19:08
Added	status.wordpress.org,glotpress.blog,wordpress.tv	URL	Out of Scope	19:08
Added	status.wordpress.org,glotpress.blog,wordpress.tv	URL	Out of Scope	19:08
Added	org.wordpress.android	ANDROID	Out of Scope	19:08
Added	https://github.com/wordpress-mobile	URL	Out of Scope	19:08
Added	.trac.wordpress.org, .svn.wordpress.org, *.git.wordpress.org, github.com/wordpress	CODE	In Scope	19:08
Added	.trac.wordpress.org, .svn.wordpress.org, *.git.wordpress.org, github.com/wordpress	CODE	In Scope	19:08

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	official wordpress plugins	CODE	In Scope	00:40
Added	wordpressfoundation.org	URL	In Scope	00:40
Added	api.wordpress.org	URL	In Scope	00:40
Added	mercantile.wordpress.org	URL	In Scope	00:40
Added	.trac.wordpress.org, .svn.wordpress.org, *.git.wordpress.org, github.com/wordpress	URL	In Scope	00:40
Added	gutenberg	URL	In Scope	00:40
Added	335703880	IOS	Out of Scope	00:40
Added	wp-cli	CODE	In Scope	00:40
Added	bbpress core	URL	In Scope	00:40
Added	*.wordpress.org	WILDCARD	In Scope	00:40
Added	*.wordcamp.org	WILDCARD	In Scope	00:40
Added	*.wordpress.net	WILDCARD	In Scope	00:40
Added	*.wordpress.com	WILDCARD	Out of Scope	00:40
Added	glotpress	CODE	In Scope	00:40
Added	munin-*.wordpress.org	WILDCARD	In Scope	00:40
Added	wordpress core	URL	In Scope	00:40
Added	*.buddypress.org,bbpress.org,profiles.wordpress.org	WILDCARD	In Scope	00:40
Added	*.buddypress.org,bbpress.org,profiles.wordpress.org	WILDCARD	In Scope	00:40
Added	*.buddypress.org,bbpress.org,profiles.wordpress.org	WILDCARD	In Scope	00:40
Added	codex.wordpress.org,codex.bbpress.org,codex.buddypress.org	URL	In Scope	00:40
Added	codex.wordpress.org,codex.bbpress.org,codex.buddypress.org	URL	In Scope	00:40
Added	codex.wordpress.org,codex.bbpress.org,codex.buddypress.org	URL	In Scope	00:40
Added	irclogs.wordpress.org	URL	In Scope	00:40
Added	status.wordpress.org,glotpress.blog,wordpress.tv	URL	Out of Scope	00:40
Added	status.wordpress.org,glotpress.blog,wordpress.tv	URL	Out of Scope	00:40
Added	status.wordpress.org,glotpress.blog,wordpress.tv	URL	Out of Scope	00:40
Added	archived github repositories	OTHER	Out of Scope	00:40
Added	buddypress core	URL	In Scope	00:40
Added	lists.wordpress.org	URL	In Scope	00:40
Added	planet.wordpress.org	URL	In Scope	00:40
Added	doaction.org	URL	In Scope	00:40
Added	digital ocean, aws, etc	OTHER	Out of Scope	00:40
Added	org.wordpress.android	ANDROID	Out of Scope	00:40
Added	https://github.com/wordpress-mobile	URL	Out of Scope	00:40

Feb 21, 2026

Change	Asset	Category	Scope	Time
Removed	wp-cli	CODE	In Scope	21:38
Removed	official wordpress plugins	CODE	In Scope	21:38
Removed	wordpressfoundation.org	URL	In Scope	21:38
Removed	munin-*.wordpress.org	WILDCARD	In Scope	21:38
Removed	wordpress core	CODE	In Scope	21:38
Removed	buddypress core	CODE	In Scope	21:38
Removed	bbpress core	CODE	In Scope	21:38
Removed	*.wordpress.org	WILDCARD	In Scope	21:38
Removed	api.wordpress.org	URL	In Scope	21:38
Removed	*.buddypress.org,bbpress.org,profiles.wordpress.org	WILDCARD	In Scope	21:38
Removed	*.wordcamp.org	WILDCARD	In Scope	21:38
Removed	codex.wordpress.org,codex.bbpress.org,codex.buddypress.org	URL	In Scope	21:38
Removed	mercantile.wordpress.org	URL	In Scope	21:38
Removed	.trac.wordpress.org, .svn.wordpress.org, *.git.wordpress.org, github.com/wordpress	CODE	In Scope	21:38
Removed	irclogs.wordpress.org	URL	In Scope	21:38
Removed	lists.wordpress.org	URL	In Scope	21:38
Removed	planet.wordpress.org	URL	In Scope	21:38
Removed	*.wordpress.net	WILDCARD	In Scope	21:38
Removed	doaction.org	URL	In Scope	21:38
Removed	gutenberg	CODE	In Scope	21:38
Removed	glotpress	CODE	In Scope	21:38