WordPress Superhero Challenge Launched by Wordfence

Wordfence has introduced the WordPress Superhero Challenge as an initiative under the Bug Bounty Program. This challenge is open until the 14th of October with cash prizes of up to $31,200.

The challenge is targeted solely towards themes and plugins that have more than five million installations. Wordfence aims to secure the Web by funding vulnerability research and releasing the vulnerabilities accordingly.

Vulnerability researchers interested in participating in the WordPress Superhero Challenge can sign up through Wordfence’s official page.

WordPress Superhero Challenge: Competition details

In addition to the cash prize, selected researchers will also be granted a WordPress Superhero badge which will indicate their spectacular efforts towards the security of WordPress.

The Bug Bounty Program was released by Wordfence in 2023 to remunerate researchers for their efforts in discovering and reporting vulnerabilities confidentially. Researchers are also rewarded based on the vulnerability’s criticality and prevalence, ongoing install counts and exploitation ease. Wordfence has spent more than $300,000 in ‘bounties’ ever since its first launch in 2023.

This program does not include companies like Automattic, Google, Siteground and Brainstorm. This exclusion is because these companies have their separate reward programs.

Threat Intelligence Lead at Wordfence, Chloe Chamberland has stated in an official blog that Wordfence plans to supercharge the amount of research needed for trending products. This would consequently improve the security of millions of site visitors who have the products already installed.

Vulnerability in the WordPress plugin for the Metform Elementor Contact Form Builder.