l8BL

Patchstack Bug Bounty Program

13 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
21İzleyin	CVE-2025-53337İstismar yok	WordPress LifePress plugin <= 2.1.3 - Broken Access Control vulnerabilityashan perera · lifepress · CWE-862 Erişim denetimi (IDOR)	Orta5,4	—	%0,2	28 Ağu 2025
21İzleyin	CVE-2025-22634İstismar yok	WordPress Easy Booked Plugin <= 2.4.5 - Cross Site Request Forgery (CSRF) vulnerabilitymd abu jubayer hossain · easy booked – appointment booking and scheduling management system for wordpress · CWE-352 Kimlik doğrulamasız CSRF	Orta5,4	—	%0,1	27 Mar 2025
26İzleyin	CVE-2025-24643İstismar yok	WordPress WPGuppy plugin <= 1.1.0 - Broken Authentication vulnerabilityamentotech private limited · wpguppy · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta6,5	—	%0,4	3 Şub 2025
36İzleyin	CVE-2025-24650İstismar yok	WordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerabilitythemefic · tourfic · CWE-434 Dosya yükleme	Kritik9,1	—	%0,6	24 Oca 2025
19İzleyin	CVE-2025-24611İstismar yok	WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerabilitysmackcoders inc., · wp ultimate exporter · CWE-22 Yol geçişi	Orta4,9	—	%0,7	24 Oca 2025
36İzleyin	CVE-2025-22723İstismar yok	WordPress Barcode Scanner and Inventory manager plugin <= 1.6.7 - Arbitrary File Upload vulnerabilitydmitry v. (ceo of "ukr solution") · barcode scanner with inventory & order manager · CWE-434 Dosya yükleme	Kritik9,1	—	%0,5	21 Oca 2025
26İzleyin	CVE-2025-22761İstismar yok	WordPress Ajax Contact Form plugin <= 1.4.1 - Stored Cross Site Scripting (XSS) vulnerabilityolaf lederer · ajax contact form · CWE-79 XSS	Orta6,5	—	%0,2	15 Oca 2025
35İzleyin	CVE-2024-56280İstismar yok	WordPress WPGuppy plugin <= 1.1.0 - Privilege Escalation vulnerabilityamentotech private limited · wpguppy · CWE-266	Yüksek8,8	—	%0,4	7 Oca 2025
39İzleyin	CVE-2024-49222İstismar yok	WordPress WPGuppy plugin <= 1.1.0 - PHP Object Injection vulnerabilityamentotech private limited · wpguppy · CWE-502 Kimlik doğrulamasız Deserializasyon	Kritik9,8	—	%0,5	7 Oca 2025
30İzleyin	CVE-2024-56250İstismar yok	WordPress Just Writing Statistics plugin <= 4.7 - SQL Injection vulnerabilitygreg ross · just writing statistics · CWE-89 SQL enjeksiyonu	Yüksek7,6	—	%0,4	2 Oca 2025
36İzleyin	CVE-2024-56249Kavram kanıtı	WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerabilityludwig you · wpmastertoolkit · CWE-434 Dosya yükleme	Kritik9,1	—	%1,3	2 Oca 2025
19İzleyin	CVE-2024-56248İstismar yok	WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Download vulnerabilityludwig you · wpmastertoolkit · CWE-22 Yol geçişi	Orta4,9	—	%0,5	2 Oca 2025
23İzleyin	CVE-2024-54442İstismar yok	WordPress Better WP Login Page plugin <= 1.1.2 - Stored Cross Site Scripting (XSS) vulnerabilitycortesfrau · better wp login page · CWE-79 XSS	Orta5,9	—	%0,4	16 Ara 2024

CVE-2025-53337
21İzleyin
WordPress LifePress plugin <= 2.1.3 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
ashan perera · lifepress28 Ağu 2025
CVE-2025-22634
21İzleyin
WordPress Easy Booked Plugin <= 2.4.5 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
md abu jubayer hossain · easy booked – appointment booking and scheduling management system for wordpress27 Mar 2025
CVE-2025-24643
26İzleyin
WordPress WPGuppy plugin <= 1.1.0 - Broken Authentication vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
amentotech private limited · wpguppy3 Şub 2025
CVE-2025-24650
36İzleyin
WordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerability
KritikCVSS 9,1İstismar yokEPSS %1
- Dosya yükleme
themefic · tourfic24 Oca 2025
CVE-2025-24611
19İzleyin
WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability
OrtaCVSS 4,9İstismar yokEPSS %1
- Yol geçişi
smackcoders inc., · wp ultimate exporter24 Oca 2025
CVE-2025-22723
36İzleyin
WordPress Barcode Scanner and Inventory manager plugin <= 1.6.7 - Arbitrary File Upload vulnerability
KritikCVSS 9,1İstismar yokEPSS %0
- Dosya yükleme
dmitry v. (ceo of "ukr solution") · barcode scanner with inventory & order manager21 Oca 2025
CVE-2025-22761
26İzleyin
WordPress Ajax Contact Form plugin <= 1.4.1 - Stored Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
olaf lederer · ajax contact form15 Oca 2025
CVE-2024-56280
35İzleyin
WordPress WPGuppy plugin <= 1.1.0 - Privilege Escalation vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
amentotech private limited · wpguppy7 Oca 2025
CVE-2024-49222
39İzleyin
WordPress WPGuppy plugin <= 1.1.0 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Deserializasyon
amentotech private limited · wpguppy7 Oca 2025
CVE-2024-56250
30İzleyin
WordPress Just Writing Statistics plugin <= 4.7 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0
- SQL enjeksiyonu
greg ross · just writing statistics2 Oca 2025
CVE-2024-56249
36İzleyin
WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability
KritikCVSS 9,1Kavram kanıtıEPSS %1
- Dosya yükleme
ludwig you · wpmastertoolkit2 Oca 2025
CVE-2024-56248
19İzleyin
WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Download vulnerability
OrtaCVSS 4,9İstismar yokEPSS %1
- Yol geçişi
ludwig you · wpmastertoolkit2 Oca 2025
CVE-2024-54442
23İzleyin
WordPress Better WP Login Page plugin <= 1.1.2 - Stored Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0
- XSS
cortesfrau · better wp login page16 Ara 2024