PPzzAArr
Patchstack Bug Bounty Program
20 kredili kayıt · son 12 ayda 19 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
23İzleyin | CVE-2026-27365İstismar yok | WordPress PublishPress Series plugin <= 2.17.0 - Cross Site Scripting (XSS) vulnerabilitypublishpress · publishpress series · CWE-79 | Orta5,9 | — | %0,2 | 18 Ağu 2026 |
21İzleyin | CVE-2026-27329İstismar yok | WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerabilityyith · yith woocommerce wishlist · CWE-639 | Orta5,3 | — | %0,3 | 7 May 2026 |
26İzleyin | CVE-2026-27046İstismar yok | WordPress StoreCustomizer plugin <= 2.6.3 - Broken Access Control vulnerabilitykaira · storecustomizer · CWE-862 | Orta6,5 | — | %0,3 | 25 Mar 2026 |
26İzleyin | CVE-2026-25465İstismar yok | WordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerabilitycodepeople · cp multi view event calendar · CWE-79 | Orta6,5 | — | %0,2 | 25 Mar 2026 |
30İzleyin | CVE-2026-24372İstismar yok | WordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerabilitywp swings · subscriptions for woocommerce · CWE-290 | Yüksek7,5 | — | %0,5 | 25 Mar 2026 |
26İzleyin | CVE-2026-23972İstismar yok | WordPress Booking and Rental Manager plugin <= 2.6.0 - Broken Access Control vulnerabilitymagepeopleteam · booking and rental manager · CWE-862 | Orta6,5 | — | %0,3 | 25 Mar 2026 |
17İzleyin | CVE-2026-31919İstismar yok | WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1 - Broken Access Control vulnerabilityjosh kohlbach · advanced coupons for woocommerce coupons · CWE-862 | Orta4,3 | — | %0,3 | 13 Mar 2026 |
23İzleyin | CVE-2026-27344Kavram kanıtı | WordPress inseri core plugin <= 1.0.5 - Broken Access Control vulnerabilityinseriswiss · inseri core · CWE-862 | Orta5,9 | — | %0,3 | 5 Mar 2026 |
30İzleyin | CVE-2026-24385İstismar yok | WordPress Podlove Web Player plugin <= 5.9.1 - PHP Object Injection vulnerabilitygerritvanaaken · podlove web player · CWE-502 | Yüksek7,5 | — | %0,3 | 5 Mar 2026 |
26İzleyin | CVE-2025-69343İstismar yok | WordPress Theater for WordPress plugin <= 0.19 - Cross Site Scripting (XSS) vulnerabilityjeroen schmit · theater for wordpress · CWE-79 | Orta6,5 | — | %0,2 | 5 Mar 2026 |
21İzleyin | CVE-2026-27042İstismar yok | WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerabilitywpdeveloper · notificationx · CWE-862 | Orta5,3 | — | %0,3 | 19 Şub 2026 |
21İzleyin | CVE-2026-24375İstismar yok | WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerabilitywp swings · ultimate gift cards for woocommerce · CWE-862 | Orta5,3 | — | %0,2 | 19 Şub 2026 |
26İzleyin | CVE-2026-24988İstismar yok | WordPress The Events Calendar Shortcode & Block plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerabilitybrian hogg · the events calendar shortcode & block · CWE-79 | Orta6,5 | — | %0,1 | 3 Şub 2026 |
21İzleyin | CVE-2026-24599İstismar yok | WordPress NextMove Lite plugin <= 2.23.0 - Insecure Direct Object References (IDOR) vulnerabilityxlplugins · nextmove lite · CWE-639 | Orta5,3 | — | %0,4 | 23 Oca 2026 |
21İzleyin | CVE-2026-24366İstismar yok | WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerabilityyithemes · yith woocommerce request a quote · CWE-862 | Orta5,3 | — | %0,2 | 22 Oca 2026 |
21İzleyin | CVE-2026-22461İstismar yok | WordPress CTX Feed plugin <= 6.6.18 - Broken Access Control vulnerabilitywebappick · ctx feed · CWE-862 | Orta5,3 | — | %0,4 | 22 Oca 2026 |
17İzleyin | CVE-2025-69327İstismar yok | WordPress Car Rental Manager plugin <= 1.0.9 - Broken Access Control vulnerabilitymagepeopleteam · car rental manager · CWE-862 | Orta4,3 | — | %0,3 | 6 Oca 2026 |
17İzleyin | CVE-2025-67621İstismar yok | WordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability10up · eight day week print workflow · CWE-497 | Orta4,3 | — | %0,3 | 24 Ara 2025 |
19İzleyin | CVE-2025-64253İstismar yok | WordPress Health Check & Troubleshooting plugin <= 1.7.1 - Path Traversal vulnerabilitywordpress.org · health check & troubleshooting · CWE-35 | Orta4,9 | — | %0,5 | 16 Ara 2025 |
21İzleyin | CVE-2025-47444İstismar yok | WordPress FiboSearch plugin <= 1.32.1 - Broken Access Control vulnerabilitydamian góra · fibosearch · CWE-862 | Orta5,3 | — | %0,2 | 12 Ağu 2025 |
- CVE-2026-2736523İzleyin
WordPress PublishPress Series plugin <= 2.17.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0publishpress · publishpress series18 Ağu 2026
- CVE-2026-2732921İzleyin
WordPress YITH WooCommerce Wishlist plugin <= 4.12.0 - Insecure Direct Object References (IDOR) vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0yith · yith woocommerce wishlist7 May 2026
- CVE-2026-2704626İzleyin
WordPress StoreCustomizer plugin <= 2.6.3 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0kaira · storecustomizer25 Mar 2026
- CVE-2026-2546526İzleyin
WordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0codepeople · cp multi view event calendar25 Mar 2026
- CVE-2026-2437230İzleyin
WordPress Subscriptions for WooCommerce plugin <= 1.8.10 - Bypass Vulnerability vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0wp swings · subscriptions for woocommerce25 Mar 2026
- CVE-2026-2397226İzleyin
WordPress Booking and Rental Manager plugin <= 2.6.0 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0magepeopleteam · booking and rental manager25 Mar 2026
- CVE-2026-3191917İzleyin
WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0josh kohlbach · advanced coupons for woocommerce coupons13 Mar 2026
- CVE-2026-2734423İzleyin
WordPress inseri core plugin <= 1.0.5 - Broken Access Control vulnerability
OrtaCVSS 5,9Kavram kanıtıEPSS %0inseriswiss · inseri core5 Mar 2026
- CVE-2026-2438530İzleyin
WordPress Podlove Web Player plugin <= 5.9.1 - PHP Object Injection vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0gerritvanaaken · podlove web player5 Mar 2026
- CVE-2025-6934326İzleyin
WordPress Theater for WordPress plugin <= 0.19 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0jeroen schmit · theater for wordpress5 Mar 2026
- CVE-2026-2704221İzleyin
WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wpdeveloper · notificationx19 Şub 2026
- CVE-2026-2437521İzleyin
WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wp swings · ultimate gift cards for woocommerce19 Şub 2026
- CVE-2026-2498826İzleyin
WordPress The Events Calendar Shortcode & Block plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0brian hogg · the events calendar shortcode & block3 Şub 2026
- CVE-2026-2459921İzleyin
WordPress NextMove Lite plugin <= 2.23.0 - Insecure Direct Object References (IDOR) vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0xlplugins · nextmove lite23 Oca 2026
- CVE-2026-2436621İzleyin
WordPress YITH WooCommerce Request A Quote plugin <= 2.46.0 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0yithemes · yith woocommerce request a quote22 Oca 2026
- CVE-2026-2246121İzleyin
WordPress CTX Feed plugin <= 6.6.18 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0webappick · ctx feed22 Oca 2026
- CVE-2025-6932717İzleyin
WordPress Car Rental Manager plugin <= 1.0.9 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0magepeopleteam · car rental manager6 Oca 2026
- CVE-2025-6762117İzleyin
WordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability
OrtaCVSS 4,3İstismar yokEPSS %010up · eight day week print workflow24 Ara 2025
- CVE-2025-6425319İzleyin
WordPress Health Check & Troubleshooting plugin <= 1.7.1 - Path Traversal vulnerability
OrtaCVSS 4,9İstismar yokEPSS %0wordpress.org · health check & troubleshooting16 Ara 2025
- CVE-2025-4744421İzleyin
WordPress FiboSearch plugin <= 1.32.1 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0damian góra · fibosearch12 Ağu 2025