İçeriğe atla
Noroxi

Dave Jong (Patchstack)

Patchstack Bug Bounty Program

252 kredili kayıt · son 12 ayda 7 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2026-28188
    29İzleyin

    WordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    themefic · hydra booking13 Ağu 2026

  • CVE-2026-65435
    26İzleyin

    WordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    thrive themes coupon · thrive leads version27 Tem 2026

  • CVE-2024-54222
    17İzleyin

    WordPress Seraphinite Accelerator plugin <= 2.22.15 - Authenticated Sensitive Data Exposure vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    seraphinite solutions · seraphinite accelerator20 Şub 2026

  • CVE-2023-25446
    30İzleyin

    WordPress HappyFiles Pro plugin <= 1.8.1 - Broken Access Control vulnerability

    YüksekCVSS 7,7İstismar yokEPSS %0

    happyfiles · happyfiles pro20 Ara 2025

  • CVE-2023-25445
    21İzleyin

    WordPress HappyFiles Pro plugin <= 1.8.1 - Broken Access Control vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    happyfiles · happyfiles pro20 Ara 2025

  • CVE-2023-25068
    17İzleyin

    WordPress Magazine Edge theme <= 1.13 - Authenticated Arbitrary Plugin Activation

    OrtaCVSS 4,3İstismar yokEPSS %0

    mapro collins · magazine edge20 Ara 2025

  • CVE-2023-23729
    21İzleyin

    WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Contributor+ reCAPTCHA Settings Change Vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    brainstorm force · spectra9 Ara 2025

  • CVE-2025-48333
    28İzleyin

    WordPress eForm - WordPress Form Builder < 4.19.1 - Cross Site Scripting (XSS) Vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    wpquark · eform - wordpress form builder17 Haz 2025

  • CVE-2025-39366
    35İzleyin

    WordPress wProject theme < 5.8.0 - Subscriber+ Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    rocket apps · wproject19 May 2025

  • CVE-2025-39365
    28İzleyin

    WordPress wProject theme < 5.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    rocket apps · wproject19 May 2025

  • CVE-2025-39350
    32İzleyin

    WordPress wProject theme < 5.8.0 - Unauthenticated Post/Comment/Attachment Modification/Deletion vulnerability

    YüksekCVSS 8,2İstismar yokEPSS %0

    rocket apps · wproject19 May 2025

  • CVE-2023-32240
    21İzleyin

    WordPress Woodmart theme <= 7.2.1 - Broken Access Control vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    xtemos · woodmart2 Oca 2025

  • CVE-2024-37925
    21İzleyin

    WordPress BuddyBoss Theme theme <= 2.4.61 - Cross Site Request Forgery (CSRF) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    buddyboss llc · buddyboss theme2 Oca 2025

  • CVE-2024-37438
    21İzleyin

    WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Cross Site Request Forgery (CSRF) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    uncanny owl · uncanny toolkit pro for learndash2 Oca 2025

  • CVE-2024-56069
    28İzleyin

    WordPress WP SuperBackup plugin <= 2.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    azzaroco · wp superbackup2 Oca 2025

  • CVE-2024-56070
    29İzleyin

    WordPress WP SuperBackup plugin <= 2.3.3 - Multiple Subscriber+ Broken Access Control vulnerabilities

    YüksekCVSS 7,4İstismar yokEPSS %0

    azzaroco · wp superbackup31 Ara 2024

  • CVE-2024-56068
    30İzleyin

    WordPress WP SuperBackup plugin <= 2.3.3 - Subscriber+ PHP Object Injection vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    azzaroco · wp superbackup31 Ara 2024

  • CVE-2024-56067
    33İzleyin

    WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Backup File Download Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    azzaroco · wp superbackup31 Ara 2024

  • CVE-2024-56064
    49Planlayın

    WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %31

    azzaroco · wp superbackup31 Ara 2024

  • CVE-2023-30490
    30İzleyin

    WordPress Easing Slider plugin <= 3.0.8 - Plugin Settings Reset Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %1

    matthew ruddy · easing slider13 Ara 2024

  • CVE-2023-28990
    17İzleyin

    WordPress Viral Mag theme <= 1.0.9 - Authenticated Arbitrary Plugin Activation Vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    hashthemes · viral mag13 Ara 2024

  • CVE-2023-27456
    17İzleyin

    WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation

    OrtaCVSS 4,3İstismar yokEPSS %0

    hashthemes · total13 Ara 2024

  • CVE-2024-54218
    26İzleyin

    WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Plugin Settings Change vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    thehp · aio contact9 Ara 2024

  • CVE-2024-54220
    28İzleyin

    WordPress FAT Services Booking plugin <= 5.6 - Subscriber+ Site-Wide Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    roninwp · fat services booking9 Ara 2024

  • CVE-2024-54219
    28İzleyin

    WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Site-Wide Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    thehp · aio contact9 Ara 2024