wpengine/wpenginebugbounty
18
In Scope
1
Out of Scope
In-Scope Assets (18)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *. advancedcustomfields.com | WILDCARD | Yes | - | |
| *. bettersearchreplace.com | WILDCARD | Yes | - | |
| *.deliciousbrains.com | WILDCARD | Yes | ||
| *.localwp.com | WILDCARD | Yes | ||
| *.nitropack.io | WILDCARD | Yes | ||
| *.studiopress.com | WILDCARD | Yes | ||
| *.wpengine.io | WILDCARD | Yes | ||
| *.wpesvc.net | WILDCARD | Yes | ||
| WP Engine-developed WordPress Plugins and Themes | OTHER | Yes | - | |
| https://app.getflywheel.com | URL | Yes | ||
| https://getflywheel.com | URL | Yes | ||
| https://makeshift.film | URL | Yes | ||
| https://my.wpengine.com | URL | Yes | ||
| https://payments.wpengine.com | URL | Yes | ||
| https://studiopress.blog | URL | Yes | ||
| https://torquemag.io | URL | Yes | ||
| https://velocitize.com | URL | Yes | ||
| https://wpengine.com | URL | Yes |
Out-of-Scope Assets (1)
| Asset | Category | Bounty | |
|---|---|---|---|
| marketing.nitropack.io | URL | Yes |
Scope Changes (96)
Mar 5, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://app.getflywheel.com | URL | In Scope | 17:20 |
| Added | https://app.getflywheel.com | URL | In Scope | 17:20 |
| Added | https://getflywheel.com | URL | In Scope | 17:20 |
| Added | https://my.wpengine.com | URL | In Scope | 17:20 |
| Added | https://payments.wpengine.com | URL | In Scope | 17:20 |
| Added | https://wpengine.com | URL | In Scope | 17:20 |
| Added | *. advancedcustomfields.com | WILDCARD | In Scope | 17:20 |
| Added | *. bettersearchreplace.com | WILDCARD | In Scope | 17:20 |
| Added | *.deliciousbrains.com | WILDCARD | In Scope | 17:20 |
| Added | *.localwp.com | WILDCARD | In Scope | 17:20 |
| Added | *.nitropack.io | WILDCARD | In Scope | 17:20 |
| Added | *.studiopress.com | WILDCARD | In Scope | 17:20 |
| Added | *.wpengine.io | WILDCARD | In Scope | 17:20 |
| Added | *.wpesvc.net | WILDCARD | In Scope | 17:20 |
| Added | wp engine-developed wordpress plugins and themes | OTHER | In Scope | 17:20 |
| Added | https://makeshift.film | URL | In Scope | 17:20 |
| Added | https://studiopress.blog | URL | In Scope | 17:20 |
| Added | https://torquemag.io | URL | In Scope | 17:20 |
| Added | https://velocitize.com | URL | In Scope | 17:20 |
| Added | marketing.nitropack.io | URL | Out of Scope | 17:20 |
| Added | https://getflywheel.com | URL | In Scope | 17:20 |
| Added | *.nitropack.io | WILDCARD | In Scope | 17:20 |
| Added | https://makeshift.film | URL | In Scope | 17:20 |
| Added | https://torquemag.io | URL | In Scope | 17:20 |
| Added | *. advancedcustomfields.com | WILDCARD | In Scope | 17:20 |
| Added | *. bettersearchreplace.com | WILDCARD | In Scope | 17:20 |
| Added | *.localwp.com | WILDCARD | In Scope | 17:20 |
| Added | *.studiopress.com | WILDCARD | In Scope | 17:20 |
| Added | *.wpesvc.net | WILDCARD | In Scope | 17:20 |
| Added | wp engine-developed wordpress plugins and themes | OTHER | In Scope | 17:20 |
| Added | https://studiopress.blog | URL | In Scope | 17:20 |
| Added | https://my.wpengine.com | URL | In Scope | 17:20 |
| Added | https://payments.wpengine.com | URL | In Scope | 17:20 |
| Added | https://wpengine.com | URL | In Scope | 17:20 |
| Added | *.deliciousbrains.com | WILDCARD | In Scope | 17:20 |
| Added | *.wpengine.io | WILDCARD | In Scope | 17:20 |
| Added | https://velocitize.com | URL | In Scope | 17:20 |
| Added | marketing.nitropack.io | URL | Out of Scope | 17:20 |
| Program Removed | — | — | — | 11:30 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://makeshift.film | URL | In Scope | 19:09 |
| Added | *.deliciousbrains.com | WILDCARD | In Scope | 19:09 |
| Added | https://studiopress.blog | URL | In Scope | 19:09 |
| Added | https://app.getflywheel.com | URL | In Scope | 19:09 |
| Added | https://wpengine.com | URL | In Scope | 19:09 |
| Added | https://my.wpengine.com | URL | In Scope | 19:09 |
| Added | *.localwp.com | WILDCARD | In Scope | 19:09 |
| Added | *.wpengine.io | WILDCARD | In Scope | 19:09 |
| Added | https://torquemag.io | URL | In Scope | 19:09 |
| Added | marketing.nitropack.io | URL | Out of Scope | 19:09 |
| Added | https://getflywheel.com | URL | In Scope | 19:09 |
| Added | https://payments.wpengine.com | URL | In Scope | 19:09 |
| Added | *. advancedcustomfields.com | WILDCARD | In Scope | 19:09 |
| Added | *.nitropack.io | WILDCARD | In Scope | 19:09 |
| Added | *.studiopress.com | WILDCARD | In Scope | 19:09 |
| Added | https://velocitize.com | URL | In Scope | 19:09 |
| Added | *. bettersearchreplace.com | WILDCARD | In Scope | 19:09 |
| Added | *.wpesvc.net | WILDCARD | In Scope | 19:09 |
| Added | wp engine-developed wordpress plugins and themes | OTHER | In Scope | 19:09 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.deliciousbrains.com | WILDCARD | In Scope | 00:50 |
| Added | *.nitropack.io | WILDCARD | In Scope | 00:50 |
| Added | *.wpengine.io | WILDCARD | In Scope | 00:50 |
| Added | https://makeshift.film | URL | In Scope | 00:50 |
| Added | https://app.getflywheel.com | URL | In Scope | 00:50 |
| Added | https://payments.wpengine.com | URL | In Scope | 00:50 |
| Added | https://wpengine.com | URL | In Scope | 00:50 |
| Added | *. bettersearchreplace.com | WILDCARD | In Scope | 00:50 |
| Added | *.localwp.com | WILDCARD | In Scope | 00:50 |
| Added | https://studiopress.blog | URL | In Scope | 00:50 |
| Added | *. advancedcustomfields.com | WILDCARD | In Scope | 00:50 |
| Added | *.wpesvc.net | WILDCARD | In Scope | 00:50 |
| Added | wp engine-developed wordpress plugins and themes | OTHER | In Scope | 00:50 |
| Added | *.studiopress.com | WILDCARD | In Scope | 00:50 |
| Added | https://torquemag.io | URL | In Scope | 00:50 |
| Added | https://velocitize.com | URL | In Scope | 00:50 |
| Added | marketing.nitropack.io | URL | Out of Scope | 00:50 |
| Added | https://getflywheel.com | URL | In Scope | 00:50 |
| Added | https://my.wpengine.com | URL | In Scope | 00:50 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | https://app.getflywheel.com | URL | In Scope | 21:40 |
| Removed | https://getflywheel.com | URL | In Scope | 21:40 |
| Removed | https://my.wpengine.com | URL | In Scope | 21:40 |
| Removed | https://payments.wpengine.com | URL | In Scope | 21:40 |
| Removed | https://wpengine.com | URL | In Scope | 21:40 |
| Removed | *. advancedcustomfields.com | WILDCARD | In Scope | 21:40 |
| Removed | *. bettersearchreplace.com | WILDCARD | In Scope | 21:40 |
| Removed | *.deliciousbrains.com | WILDCARD | In Scope | 21:40 |
| Removed | *.localwp.com | WILDCARD | In Scope | 21:40 |
| Removed | *.nitropack.io | WILDCARD | In Scope | 21:40 |
| Removed | *.studiopress.com | WILDCARD | In Scope | 21:40 |
| Removed | *.wpengine.io | WILDCARD | In Scope | 21:40 |
| Removed | *.wpesvc.net | WILDCARD | In Scope | 21:40 |
| Removed | wp engine-developed wordpress plugins and themes | OTHER | In Scope | 21:40 |
| Removed | https://makeshift.film | URL | In Scope | 21:40 |
| Removed | https://studiopress.blog | URL | In Scope | 21:40 |
| Removed | https://torquemag.io | URL | In Scope | 21:40 |
| Removed | https://velocitize.com | URL | In Scope | 21:40 |
| Removed | marketing.nitropack.io | URL | Out of Scope | 21:40 |