İçeriğe atla
Noroxi

UKO

Patchstack Bug Bounty Program

18 kredili kayıt · son 12 ayda 5 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2026-88996
    24İzleyin

    WPForms <= 2.0.2 - Reflected Cross-Site Scripting via 'page_title' POST Parameter

    OrtaCVSS 6,1İstismar yokEPSS %0

    smub · wpforms – ai form builder for wordpress – contact forms, payment forms, survey form, quiz & more5 gün önce

  • CVE-2026-15797
    25İzleyin

    Popup Maker <= 1.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_title

    OrtaCVSS 6,4İstismar yokEPSS %0

    danieliser · popup maker – boost sales, conversions, optins, subscribers with the ultimate wp popup builder18 Eyl 2026

  • CVE-2026-85414
    25İzleyin

    Gallery : FooGallery <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute

    OrtaCVSS 6,4İstismar yokEPSS %0

    fooplugins · gallery : foogallery5 Eyl 2026

  • CVE-2026-15446
    25İzleyin

    EWWW Image Optimizer <= 8.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content

    OrtaCVSS 6,4İstismar yokEPSS %0

    nosilver4u · ewww image optimizer19 Ağu 2026

  • CVE-2026-15988
    35İzleyin

    AI Engine <= 3.6.5 - Cross-Site Request Forgery to Privilege Escalation via REQUEST_URI Substring Match

    YüksekCVSS 8,8İstismar yokEPSS %0

    tigroumeow · ai engine – the chatbot, ai framework & mcp for wordpress1 Ağu 2026

  • CVE-2025-31627
    23İzleyin

    WordPress Media Library Assistant plugin <= 3.24 - Stored Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    david lingren · media library assistant31 Mar 2025

  • CVE-2025-24579
    23İzleyin

    WordPress Nested pages plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    kyle phillips · nested pages24 Oca 2025

  • CVE-2025-22762
    23İzleyin

    WordPress Octrace Support Pro plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    octrace · wordpress helpdesk & support ticket system plugin – octrace support15 Oca 2025

  • CVE-2024-52493
    23İzleyin

    WordPress Meteor Slides plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    meteor slides project · meteor slides2 Ara 2024

  • CVE-2024-52492
    23İzleyin

    WordPress Image horizontal reel scroll slideshow plugin <= 13.4 - Stored Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    gopiplus · image horizontal reel scroll slideshow2 Ara 2024

  • CVE-2024-52491
    23İzleyin

    WordPress Sticky Social Icons plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    sanil shakya · sticky social icons2 Ara 2024

  • CVE-2024-52489
    23İzleyin

    WordPress Add Chat App Button plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    udidol · add chat app button2 Ara 2024

  • CVE-2024-50415
    23İzleyin

    WordPress Ads.txt & App-ads.txt Manager for WordPress plugin <= 1.1.7.1 - Stored Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    pagup · ads.txt & app-ads.txt manager for wordpress29 Eki 2024

  • CVE-2024-50414
    23İzleyin

    WordPress Button contact VR plugin <= 4.7.9.1 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    buttonizer · button contact vr29 Eki 2024

  • CVE-2024-50413
    23İzleyin

    WordPress Import and export users and customers plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    javier carazo · import and export users and customers29 Eki 2024

  • CVE-2024-50412
    23İzleyin

    WordPress Conditional Fields for Contact Form 7 plugin <= 2.4.15 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    jules colle · conditional fields for contact form 729 Eki 2024

  • CVE-2024-50411
    19İzleyin

    WordPress WP Abstracts plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 4,8İstismar yokEPSS %0

    kevonadonis · wp abstracts29 Eki 2024

  • CVE-2024-48046
    23İzleyin

    WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    supsystic · contact form by supsystic17 Eki 2024