İçeriğe atla
Noroxi

she11f

Patchstack Bug Bounty Program

20 kredili kayıt · son 12 ayda 20 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2026-84847
    30İzleyin

    WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    brightvesseldev · quick event manager3 Eyl 2026

  • CVE-2026-81280
    26İzleyin

    WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    ukr solution · print barcode labels for your woocommerce products/orders31 Ağu 2026

  • CVE-2026-65570
    32İzleyin

    WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    hamid alinia · login with phone number6 Ağu 2026

  • CVE-2026-15052
    28İzleyin

    MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder <= 4.3.3 - Unauthenticated Stored Cross-Site Scripting via Form Field Values

    YüksekCVSS 7,2İstismar yokEPSS %0

    umarbajwa · mailchimp subscribe form, optin builder, popup builder, form builder1 Ağu 2026

  • CVE-2026-14234
    28İzleyin

    WOLF - WordPress Posts Bulk Editor and Manager < 1.1.0 - Stored XSS via CSRF

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · wolf29 Tem 2026

  • CVE-2026-57698
    26İzleyin

    WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.12 - Broken Authentication vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    villatheme · abandoned cart recovery for woocommerce13 Tem 2026

  • CVE-2026-57418
    26İzleyin

    WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.13 - Broken Access Control vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    boldgrid · client invoicing by sprout invoices13 Tem 2026

  • CVE-2026-57389
    34İzleyin

    WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %1

    adrian tobey · groundhogg13 Tem 2026

  • CVE-2026-57372
    28İzleyin

    WordPress WPJAM Basic plugin <= 7.0 - Server Side Request Forgery (SSRF) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    denishua · wpjam basic13 Tem 2026

  • CVE-2026-11581
    23İzleyin

    Kali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field Caption

    OrtaCVSS 5,9İstismar yokEPSS %0

    unknown · kali forms — contact form & drag-and-drop builder30 Haz 2026

  • CVE-2026-57328
    26İzleyin

    WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    strategy11 team · business directory29 Haz 2026

  • CVE-2026-54821
    29İzleyin

    WordPress Visual Link Preview plugin <= 2.3.1 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,4İstismar yokEPSS %0

    bootstrapped ventures · visual link preview25 Haz 2026

  • CVE-2026-48885
    28İzleyin

    WordPress HollerBox plugin <= 2.3.10.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    groundhogg · hollerbox15 Haz 2026

  • CVE-2026-52704
    40Planlayın

    WordPress WooCommerce PDF Invoice Builder plugin <= 2.0.8 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 10,0İstismar yokEPSS %1

    edgar rojas · woocommerce pdf invoice builder15 Haz 2026

  • CVE-2026-9848
    30İzleyin

    WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    emarket-design · customer support ticket system & helpdesk12 Haz 2026

  • CVE-2026-42746
    29İzleyin

    WordPress Smart Online Order for Clover plugin <= 1.6.0 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    zaytech · smart online order for clover27 May 2026

  • CVE-2026-42745
    29İzleyin

    WordPress Smart Online Order for Clover plugin <= 1.6.0 - Broken Authentication vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    zaytech · smart online order for clover27 May 2026

  • CVE-2026-42738
    28İzleyin

    WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    zaytech · smart online order for clover27 May 2026

  • CVE-2026-42734
    28İzleyin

    WordPress Geo Mashup plugin <= 1.13.19 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    dylan kuhn · geo mashup27 May 2026

  • CVE-2026-42726
    26İzleyin

    WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    strategy11 team · awp classifieds27 May 2026