Support

This project is self-funded. The research runs on paid model access and a machine that spends a lot of its day scanning plugin source, and the findings are given away — disclosed through channels that assign CVE identifiers, then written up here once the CVE is public and coordinated disclosure is complete.

If any of it has been useful to you, you can contribute toward that cost. There is no tier, no reward, and nothing behind a paywall. Everything published here stays published and free whether anyone contributes or not.

Addresses

Bitcoin

bc1qjdxt0wuuvx6xln56yqvjpu4hu2eu249ntqnj3r

Ethereum

0x54F7AdC773046820B417721159e5980f15C412CD

Verify an address against this page before sending, and prefer a small test transaction first. These are read-only receiving addresses; nothing here can request a payment from you, and this page runs no scripts of any kind.

The Ethereum address is given in its mixed-case form deliberately: the capitalisation is an EIP-55 checksum, so your wallet will reject it if a character has been altered in transit. An all-lowercase Ethereum address carries no such protection.

What this is not

Contributions buy no influence over what gets researched, no early access to a finding, and no say in how or when anything is disclosed. Nothing is withheld to encourage them.

If you are a vendor whose software is the subject of a finding here, this page is not addressed to you. Disclosure is free, it goes through the coordinating body rather than through me, and it is not contingent on anything. Please disregard this page entirely.