Patchstack Alliance
Bounties for WordPress plugin vulnerabilities
- No reviews yet
- Remote
- Worldwide
Listing checked Oct 11, 2026
About Patchstack Alliance
Patchstack Alliance is a bug bounty for WordPress plugins, themes and core. Researchers report vulnerabilities to Patchstack, get a CVE in their name for verified findings, and earn bounties that scale with how widely the plugin is installed: $125 to $250 for plugins with 1,000 or more installs, up to $16,500 to $33,000 for WordPress core. A $5,300 monthly prize pool goes to the top five researchers. Payouts go by PayPal, with Patchstack covering PayPal fees, or in Bitcoin or Ethereum.
Who can apply
Anyone can join by submitting at least one valid vulnerability report through Patchstack's database and following its submission and payout terms. You need to be able to find and document security flaws in WordPress code, and you pay your own taxes.
What workers say
No reviews yet
Have you worked with Patchstack Alliance? Your experience helps the next person decide.
More Testing gigs
Browse all 56
Loop11
Get paid to test websites
- Remote
- Global
Test IO
Become a freelance tester
- Remote
- Global
Testlio
Provide on-demand testing expertise
- Remote
- Worldwide (except US-sanctioned countries)
Tryber
Improve your favorite brands’ products
- Remote
- Global (Italy-based)
Userbrain
Make money testing websites from home
- Remote
- Global
ALS Clinical Studies
Paid beauty and skin care product trials
- In-person
- Irving, TX; Torrance, CA; Phoenix, AZ; Purchase, NY
AccessWorks
Accessibility tests for testers with disabilities
- Remote
- US and international
Blink
Paid usability studies at Blink's research labs
- In-person
- Seattle, San Diego, San Francisco, Boston and New York