Ananda Dhakal (Patchstack)
Patchstack Bug Bounty Program
361 kredili kayıt · son 12 ayda 232 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2026-62097İstismar yok | WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerabilitywptasty · business directory · CWE-89 | Yüksek7,6 | — | — | Bugün |
21İzleyin | CVE-2026-97302İstismar yok | WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerabilitythemeisle · mpg · CWE-201 | Orta5,3 | — | — | Bugün |
26İzleyin | CVE-2026-97288İstismar yok | WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerabilityjayson t cote · oauth server · CWE-79 | Orta6,5 | — | — | Bugün |
21İzleyin | CVE-2026-97243İstismar yok | WordPress AllAble Connector plugin <= 0.13.4 - Broken Access Control vulnerabilityflexyma · allable connector · CWE-862 | Orta5,4 | — | — | Bugün |
27İzleyin | CVE-2026-97242İstismar yok | WordPress WEBO MCP plugin <= 3.0.18 - Arbitrary File Deletion vulnerabilityphuongwebo · webo mcp · CWE-22 | Orta6,8 | — | — | Bugün |
30İzleyin | CVE-2026-97241İstismar yok | WordPress BackupEase plugin <= 2.2.2 - Sensitive Data Exposure vulnerabilityprecisionwp · backupease · CWE-201 | Yüksek7,5 | — | — | Bugün |
30İzleyin | CVE-2026-97240İstismar yok | WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerabilityesteban · stifli backup tools · CWE-201 | Yüksek7,5 | — | — | Bugün |
26İzleyin | CVE-2026-97239İstismar yok | WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerabilityjose conti · mcp content manager lite · CWE-862 | Orta6,5 | — | — | Bugün |
21İzleyin | CVE-2026-97066İstismar yok | WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerabilitynexcess · givewp · CWE-639 | Orta5,3 | — | — | Bugün |
28İzleyin | CVE-2026-96833İstismar yok | WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.51 - PHP Object Injection vulnerabilitythemefic · ultimate addons for contact form 7 · CWE-502 | Yüksek7,2 | — | — | Bugün |
28İzleyin | CVE-2026-96832İstismar yok | WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerabilitykeywordrush · content egg · CWE-502 | Yüksek7,2 | — | — | Bugün |
35İzleyin | CVE-2026-96831İstismar yok | WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerabilitythemifyme · themify builder · CWE-502 | Yüksek8,8 | — | — | Bugün |
30İzleyin | CVE-2026-96828İstismar yok | WordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerabilityvidish · category discount woocommerce · CWE-89 | Yüksek7,6 | — | — | Bugün |
30İzleyin | CVE-2026-96827İstismar yok | WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerabilitymelapress · admin notices manager · CWE-89 | Yüksek7,6 | — | — | Bugün |
16İzleyin | CVE-2026-96825İstismar yok | WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerabilitydavid anderson / team updraft · all in one wp security & firewall · CWE-290 | Orta4,2 | — | — | Bugün |
27İzleyin | CVE-2026-96824İstismar yok | WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerabilityenvato · template kit – import · CWE-22 | Orta6,8 | — | — | Bugün |
40Planlayın | CVE-2026-96349İstismar yok | WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerabilitysiteskite · siteskite · CWE-94 | Kritik10,0 | — | — | Bugün |
30İzleyin | CVE-2026-96348İstismar yok | WordPress Bookly plugin <= 28.2 - Broken Access Control vulnerabilitybookly · bookly · CWE-862 | Yüksek7,5 | — | — | Bugün |
26İzleyin | CVE-2026-96347İstismar yok | WordPress Bookly plugin <= 28.2 - Insecure Direct Object References (IDOR) vulnerabilitybookly · bookly · CWE-639 | Orta6,5 | — | — | Bugün |
30İzleyin | CVE-2026-96346İstismar yok | WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerabilitywedevs · wp erp · CWE-89 | Yüksek7,6 | — | — | Bugün |
30İzleyin | CVE-2026-96345İstismar yok | WordPress Estatik plugin <= 4.3.5 - SQL Injection vulnerabilityestatik · estatik · CWE-89 | Yüksek7,6 | — | — | Bugün |
28İzleyin | CVE-2026-96344İstismar yok | WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerabilityimplecode · ecommerce product catalog · CWE-502 | Yüksek7,2 | — | — | Bugün |
28İzleyin | CVE-2026-96343İstismar yok | WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerabilitywedevs · wp erp · CWE-502 | Yüksek7,2 | — | — | Bugün |
35İzleyin | CVE-2026-95531İstismar yok | WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerabilityquantumcloud · conversational forms for chatbot · CWE-502 | Yüksek8,8 | — | — | Bugün |
35İzleyin | CVE-2026-94683İstismar yok | WordPress DesignSetGo plugin <= 2.8.0 - PHP Object Injection vulnerabilityjustin nealey · designsetgo · CWE-502 | Yüksek8,8 | — | — | Bugün |
- CVE-2026-6209730İzleyin
WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokwptasty · business directoryBugün
- CVE-2026-9730221İzleyin
WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
OrtaCVSS 5,3İstismar yokthemeisle · mpgBugün
- CVE-2026-9728826İzleyin
WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokjayson t cote · oauth serverBugün
- CVE-2026-9724321İzleyin
WordPress AllAble Connector plugin <= 0.13.4 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokflexyma · allable connectorBugün
- CVE-2026-9724227İzleyin
WordPress WEBO MCP plugin <= 3.0.18 - Arbitrary File Deletion vulnerability
OrtaCVSS 6,8İstismar yokphuongwebo · webo mcpBugün
- CVE-2026-9724130İzleyin
WordPress BackupEase plugin <= 2.2.2 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokprecisionwp · backupeaseBugün
- CVE-2026-9724030İzleyin
WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokesteban · stifli backup toolsBugün
- CVE-2026-9723926İzleyin
WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokjose conti · mcp content manager liteBugün
- CVE-2026-9706621İzleyin
WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability
OrtaCVSS 5,3İstismar yoknexcess · givewpBugün
- CVE-2026-9683328İzleyin
WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.51 - PHP Object Injection vulnerability
YüksekCVSS 7,2İstismar yokthemefic · ultimate addons for contact form 7Bugün
- CVE-2026-9683228İzleyin
WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability
YüksekCVSS 7,2İstismar yokkeywordrush · content eggBugün
- CVE-2026-9683135İzleyin
WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokthemifyme · themify builderBugün
- CVE-2026-9682830İzleyin
WordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokvidish · category discount woocommerceBugün
- CVE-2026-9682730İzleyin
WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokmelapress · admin notices managerBugün
- CVE-2026-9682516İzleyin
WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability
OrtaCVSS 4,2İstismar yokdavid anderson / team updraft · all in one wp security & firewallBugün
- CVE-2026-9682427İzleyin
WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability
OrtaCVSS 6,8İstismar yokenvato · template kit – importBugün
- CVE-2026-9634940Planlayın
WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability
KritikCVSS 10,0İstismar yoksiteskite · siteskiteBugün
- CVE-2026-9634830İzleyin
WordPress Bookly plugin <= 28.2 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokbookly · booklyBugün
- CVE-2026-9634726İzleyin
WordPress Bookly plugin <= 28.2 - Insecure Direct Object References (IDOR) vulnerability
OrtaCVSS 6,5İstismar yokbookly · booklyBugün
- CVE-2026-9634630İzleyin
WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokwedevs · wp erpBugün
- CVE-2026-9634530İzleyin
WordPress Estatik plugin <= 4.3.5 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokestatik · estatikBugün
- CVE-2026-9634428İzleyin
WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability
YüksekCVSS 7,2İstismar yokimplecode · ecommerce product catalogBugün
- CVE-2026-9634328İzleyin
WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability
YüksekCVSS 7,2İstismar yokwedevs · wp erpBugün
- CVE-2026-9553135İzleyin
WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokquantumcloud · conversational forms for chatbotBugün
- CVE-2026-9468335İzleyin
WordPress DesignSetGo plugin <= 2.8.0 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokjustin nealey · designsetgoBugün