[akerl_]

How do you know it hasn’t been discovered by another attacker already?

[ranger_danger]

You don't, but you make a judgement call based on different criteria, such as how difficult the issue was to find, maybe how popular/big the site is, etc., as to whether or not you think anyone else is likely to know about it already.