{"id":"e2474c76-bdfc-4277-9b48-e61b50cbffc5","engagementId":"4890c4e5-67bb-4048-8975-4436287fa61b","data":{"brief":{"id":"b9fe4426-76d3-473a-96bf-3c44be7091ad","name":"Elementor: Bug Bounty Program","tagline":"Elementor is the best WordPress Website Builder, with over 10 million active installs.","description":"\u003cp\u003eElementor is the leading website builder platform for professionals on WordPress. Elementor serves web professionals including developers, designers and marketers and boasts a new website created every 10 seconds on its platform. \u003c/p\u003e\n\n\u003cp\u003eElementor is an open-source, GPLv3 licensed offering its platform both as free and premium. Since launching in 2016, Elementor’s reach now extends to more than 180 countries, has more than 10,000,000 active installs, and is loved by many, as seen in over 4.5K five-star reviews it received in the WordPress repository.\u003c/p\u003e\n\n\u003ch2\u003eGeneral Guidelines\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003ePlease submit any vulnerabilities associated with our plugins to Elementor's Patchstack bounty program:\n            * \u003ca href=\"https://patchstack.com/database/wordpress/plugin/elementor/vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eElementor\u003c/a\u003e\n            * \u003ca href=\"https://patchstack.com/database/wordpress/plugin/elementor-pro/vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eElementor Pro\u003c/a\u003e\n            * \u003ca href=\"https://patchstack.com/database/wordpress/plugin/pojo-accessibility/vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAlly\u003c/a\u003e\n            * \u003ca href=\"https://patchstack.com/database/wordpress/plugin/image-optimization/vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eImage Optimizer\u003c/a\u003e\n            * \u003ca href=\"https://patchstack.com/database/wordpress/plugin/aryo-activity-log/vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eActivity Log\u003c/a\u003e\n            * \u003ca href=\"https://patchstack.com/database/wordpress/plugin/temporary-login/vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eTemporary Login\u003c/a\u003e\n            * \u003ca href=\"https://patchstack.com/database/wordpress/plugin/site-mailer/vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eSite Mailer\u003c/a\u003e\n            * \u003ca href=\"https://patchstack.com/database/wordpress/plugin/block-builder/vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eElementor Blocks for Gutenberg\u003c/a\u003e\n            * \u003ca href=\"https://patchstack.com/database/wordpress/theme/hello-elementor/vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHello Elementor \u003c/a\u003e\n            * \u003ca href=\"https://patchstack.com/database/wordpress/theme/hello-biz/vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHello Biz\u003c/a\u003e\n            * \u003ca href=\"https://patchstack.com/database/wordpress/plugin/hello-plus/vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHello Plus\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eVulnerability reports which will not include manual validation - for example, reports based only on results from automated tools and scanners or which describe theoretical attack vectors without proof of exploitability - will be automatically closed.\u003c/li\u003e\n\u003cli\u003eIndicate steps to reproduce and verify you demonstrate a working proof of concept. Submissions without sufficient details - will be automatically closed.\u003c/li\u003e\n\u003cli\u003ePlease collect only the information necessary to demonstrate the vulnerability. \u003c/li\u003e\n\u003cli\u003ePlease only target your own accounts. DO NOT attempt to access the data of other accounts.\u003c/li\u003e\n\u003cli\u003eOur program will use \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd’s Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its actual likelihood or impact. In any instance where an issue is downgraded, a detailed explanation will be provided to the researcher.\u003c/li\u003e\n\u003cli\u003eVerify your target, do not attack any 3rd party supporting our services.\u003c/li\u003e\n\u003cli\u003eWe base all payouts on impact and will reward accordingly. Please emphasize the actual impact as part of your submission description.\u003c/li\u003e\n\u003cli\u003eRate Limiting - WAF technology is being utilized and will block high rate traffic deemed to be malicious. Stick with manual and pinpointed attack processes, don’t use mass scanning tools and avoid brute force attempts. If this occurs, discontinue your activity for a period of 24 hours.\u003c/li\u003e\n\u003cli\u003eOut of Scope submissions that will indicate sufficient reasoning (why you believe it should be considered) and demonstrable impact may be considered as “In Scope” submissions (case-by-case basis).\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eReward Guidelines\u003c/h3\u003e\n\n\u003cp\u003eWe base all payouts on impact and will reward accordingly. Please emphasize the impact as part of your submission.\u003c/p\u003e\n\n\u003cp\u003eWe are particularly interested and will consider extraordinary submissions for issues that result in full compromise of a system \u003c/p\u003e\n\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003ePriority\u003c/th\u003e\n\u003cth style=\"text-align: center\"\u003eReward Range\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eP1 (extraordinary submissions)\u003c/td\u003e\n\u003ctd style=\"text-align: center\"\u003eUp to $5,000\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP1\u003c/td\u003e\n\u003ctd style=\"text-align: center\"\u003e$2,000 - $4,000\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP2\u003c/td\u003e\n\u003ctd style=\"text-align: center\"\u003e$500 - $2,000\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP3\u003c/td\u003e\n\u003ctd style=\"text-align: center\"\u003e$0 - $500\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP4\u003c/td\u003e\n\u003ctd style=\"text-align: center\"\u003ePoints Only\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e","industryTagId":"46b8dcc8-bbd9-4a60-80ab-ab088c2bc3e4","targetsOverview":"\u003cp\u003e\u003cem\u003eTesting is only authorized on the targets listed as In-Scope. Any domain/property of Elementor not listed in the targets section is out of scope. This includes any/all subdomains not listed above.  IF you happen to identify a security vulnerability on a target that is not in-scope, but that demonstrably belongs to Elementor, it may be reported to this program, and is appreciated - but will ultimately be marked as ‘not applicable’ and will not be eligible for monetary or points-based compensation.\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eCredentials:\u003c/h3\u003e\n\n\u003cp\u003eTo gain access to the application, please sign up for an account using your @bugcrowdninja.com email address. For more info regarding @bugcrowdninja email addresses, see \u003ca href=\"https://researcherdocs.bugcrowd.com/v2.0/docs/your-bugcrowdninja-email-address\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e. You may register for accounts here: \u003ca href=\"https://my.elementor.com/signup/?redirect_to=%2F\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://my.elementor.com/signup/?redirect_to=%2F\u003c/a\u003e.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eExclusion List\u003c/h2\u003e\n\n\u003cp\u003eFinding types that are specifically excluded from our program:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eWebsites hosted on our Cloud service (*.elementor.cloud) are explicitly out of scope and should not be researched\u003c/li\u003e\n\u003cli\u003eAny contact or support forms\u003c/li\u003e\n\u003cli\u003eAnything SSL (related attacks, insecure cipher suites, etc.)\u003c/li\u003e\n\u003cli\u003eWeak Captcha / Captcha Bypass\u003c/li\u003e\n\u003cli\u003eUsername / Email Enumeration\u003c/li\u003e\n\u003cli\u003eBrute Force attacks on our Login or Forgot Password pages\u003c/li\u003e\n\u003cli\u003eAccount lockout enforcement and related attacks\u003c/li\u003e\n\u003cli\u003eHTTP security headers and Cookies related Issues\u003c/li\u003e\n\u003cli\u003eWeak password policies\u003c/li\u003e\n\u003cli\u003eCSRF on forms that are available to anonymous users (e.g. login or contact forms)\u003c/li\u003e\n\u003cli\u003eClickjacking\u003c/li\u003e\n\u003cli\u003eAnything related to Mail Server Domain Misconfiguration (Email spoofing, missing DMARC, SPF/DKIM, etc.)\u003c/li\u003e\n\u003cli\u003eVulnerabilities impacting only old or end-of-life platforms, browsers and plugins\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"0efa2995-b3f0-46ba-bd4e-decadc985307","name":"Elementor Targets","targets":[{"id":"b0c5b7b2-df5a-4acd-92e1-b9d548318cc3","uri":"https://my.elementor.com/","name":"https://my.elementor.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a202cd66-9795-4467-96f1-b09a2a45b864","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"b0c5b7b2-df5a-4acd-92e1-b9d548318cc3"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"b0c5b7b2-df5a-4acd-92e1-b9d548318cc3"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"b0c5b7b2-df5a-4acd-92e1-b9d548318cc3"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"b0c5b7b2-df5a-4acd-92e1-b9d548318cc3"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b0c5b7b2-df5a-4acd-92e1-b9d548318cc3"}],"recentChangeFlags":null},{"id":"92381c5f-3aa5-4b76-95a6-69daf9728fb8","uri":"https://go.elementor.com/","name":"https://go.elementor.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3672afa3-769f-43e3-a7b3-30f984a44208","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"92381c5f-3aa5-4b76-95a6-69daf9728fb8"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"92381c5f-3aa5-4b76-95a6-69daf9728fb8"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"92381c5f-3aa5-4b76-95a6-69daf9728fb8"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"92381c5f-3aa5-4b76-95a6-69daf9728fb8"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"92381c5f-3aa5-4b76-95a6-69daf9728fb8"}],"recentChangeFlags":null},{"id":"af386cfb-5048-4c50-b5ad-132db45ada2b","uri":"https://translate.elementor.com/","name":"https://translate.elementor.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"228db7ae-0127-4e9b-ac31-6cddba6c3dfd","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"af386cfb-5048-4c50-b5ad-132db45ada2b"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"af386cfb-5048-4c50-b5ad-132db45ada2b"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"af386cfb-5048-4c50-b5ad-132db45ada2b"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"af386cfb-5048-4c50-b5ad-132db45ada2b"}],"recentChangeFlags":null},{"id":"76380551-2c17-44e6-967e-5a5d84064088","uri":"https://developers.elementor.com/","name":"https://developers.elementor.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7bebd22d-3fc3-44f6-938b-1f7e9777eb9d","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"76380551-2c17-44e6-967e-5a5d84064088"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"76380551-2c17-44e6-967e-5a5d84064088"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"76380551-2c17-44e6-967e-5a5d84064088"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"76380551-2c17-44e6-967e-5a5d84064088"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"76380551-2c17-44e6-967e-5a5d84064088"}],"recentChangeFlags":null},{"id":"3b91acd5-bd3d-464e-9ce6-7eab32b0cbcf","uri":"https://library.elementor.com/","name":"https://library.elementor.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"62dd399f-bd07-46c3-bb2c-ebd601118239","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"3b91acd5-bd3d-464e-9ce6-7eab32b0cbcf"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"3b91acd5-bd3d-464e-9ce6-7eab32b0cbcf"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"3b91acd5-bd3d-464e-9ce6-7eab32b0cbcf"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"3b91acd5-bd3d-464e-9ce6-7eab32b0cbcf"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"3b91acd5-bd3d-464e-9ce6-7eab32b0cbcf"}],"recentChangeFlags":null},{"id":"770a2167-128d-42d2-80b1-ee361281dc9f","uri":"https://elementor.careers","name":"https://elementor.careers","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ddc1be20-b450-4d38-bba0-315fe424ccbb","sortOrder":5},"sortOrder":5,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"770a2167-128d-42d2-80b1-ee361281dc9f"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"770a2167-128d-42d2-80b1-ee361281dc9f"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"770a2167-128d-42d2-80b1-ee361281dc9f"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"770a2167-128d-42d2-80b1-ee361281dc9f"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"770a2167-128d-42d2-80b1-ee361281dc9f"}],"recentChangeFlags":null},{"id":"fbe78331-826a-4cb1-bc91-fc5a8b5e19db","uri":"http://activitylog.io/","name":"https://activitylog.io/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6c7c06e4-a897-4f0f-acce-43415786af75","sortOrder":6},"sortOrder":6,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"fbe78331-826a-4cb1-bc91-fc5a8b5e19db"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"fbe78331-826a-4cb1-bc91-fc5a8b5e19db"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"fbe78331-826a-4cb1-bc91-fc5a8b5e19db"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"fbe78331-826a-4cb1-bc91-fc5a8b5e19db"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fbe78331-826a-4cb1-bc91-fc5a8b5e19db"}],"recentChangeFlags":null},{"id":"3e1b0cb3-7fd6-4505-b633-5e445bd039ce","uri":"https://send2.co/","name":"https://send2.co/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c73835e9-73e1-4f37-8762-0700d6682cd2","sortOrder":7},"sortOrder":7,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"3e1b0cb3-7fd6-4505-b633-5e445bd039ce"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"3e1b0cb3-7fd6-4505-b633-5e445bd039ce"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"3e1b0cb3-7fd6-4505-b633-5e445bd039ce"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"3e1b0cb3-7fd6-4505-b633-5e445bd039ce"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"3e1b0cb3-7fd6-4505-b633-5e445bd039ce"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"32f22eb7-603a-4f1e-9313-7f716c2c625a","p1MaxCents":400000,"p1MinCents":200000,"p2MaxCents":200000,"p2MinCents":50000,"p3MaxCents":50000,"p3MinCents":null,"p4MaxCents":null,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":500000},"descriptionHtml":"\u003ch2\u003eTarget Information:\u003c/h2\u003e\n\n\u003cp\u003eThe targets for this engagement are the Elementor application, the primary Elementor website, and the Public API. The target web applications are WordPress instances. \u003c/p\u003e\n\n\u003cp\u003eIn order to test Elementor’s Cloud product (elementor.cloud) you should: \u003c/p\u003e\n\n\u003col\u003e\n\u003cli\u003eCreate an Elementor account using your Bugcrowd Ninja email address at - https://my.elementor.com/signup/\u003c/li\u003e\n\u003cli\u003eVerify your email address - you’ll receive a  verification email upon registration\u003c/li\u003e\n\u003cli\u003e\u003cp\u003eResearchers can access a one-week Elementor Pro license via the following URL: https://my.elementor.com/store/checkout?add-plans=WyJFTEVNRU5UT1ItQ0xPVUQtQlVHQk9VTlRZLVRSWS0wMSJd\u003cbr\u003e\nNote: This offer is strictly available for users with a @bugcrowdninja email domain.\u003c/p\u003e\u003c/li\u003e\n\u003cli\u003e\u003cp\u003eStart your ethical research :)\u003c/p\u003e\u003c/li\u003e\n\u003c/ol\u003e\n\n\u003cul\u003e\n\u003cli\u003eIt is important to emphasize that we have a daily limitation on sites creation as part of our Bug Bounty program\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eYou\u0026#39;re allowed to test your own websites hosted on our Cloud service. However, other websites hosted on *.elementor.cloud that are not your own are explicitly Out of Scope and should never be researched.\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{"1":{"min":2000,"max":4000},"2":{"min":500,"max":2000},"3":{"min":0,"max":500},"4":{"min":null,"max":null},"5":{"min":null,"max":null},"programMax":5000},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"4890c4e5-67bb-4048-8975-4436287fa61b","code":"elementor","state":"in_progress","endsAt":null,"bountyId":"d9e36853-7301-4963-afd4-b5b00176a326","startsAt":"2020-12-17T19:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Technology","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/a880/dc8a/18521ffb/68ba632ad0ea3d6739987c6435b17c32_elementor.jpeg","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2020-12-17T19:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/elementor","changelogs":"/engagements/elementor/changelog","submissions":null,"announcements":"/engagements/elementor/announcements","hallOfFame":"/engagements/elementor/hall_of_fames","crowdstream":null},"announcementsCount":6,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/elementor/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=elementor\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/elementor/engagement_subscribers","engagementChangelogsUrl":"/engagements/elementor/changelog","publishedAt":"2026-03-25T14:59:06.412Z","engagementChangelogUrl":"/engagements/elementor/changelog/e2474c76-bdfc-4277-9b48-e61b50cbffc5","createUserFeedbacksUrl":"/engagements/elementor/feedbacks","engagementCrowdstreamUrl":null,"acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}