Browse / FetLife

FetLife

See its reports on the map

Attack surface: 526 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to FetLife

• Information Disclosure6
• Cross-site Scripting2
• Denial of Service1
• Business Logic1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. fetlife.com/signup_step_profile expose access_token of mapbox.comInformativeCleartext Transmission of Sensitive Information · medium
   87 votes
2. Able to see highest poll result without voting or view resultInformativeInformation Exposure Through Debug Information · low
   44 votes