WHMCS

WHMCS is now a part of the WebPros Private Bug Bounty on HackerOne.

This page is retained for legacy reasons and does not accept new reports. Please use the contacts listed in the security.txt to send reports. If your report is valid, you will be invited to participate in the private bug bounty program.

For details, rules, and reward bands, please visit https://www.whmcs.com/security-bounty-program/.