İçeriğe atla
Noroxi

Ananda Dhakal (Patchstack)

Patchstack Bug Bounty Program

361 kredili kayıt · son 12 ayda 232 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2026-95603
    28İzleyin

    WordPress Reycob Product Import Export plugin <= 2.3.0 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    victor rodriguez · reycob product import export6 gün önce

  • CVE-2026-95593
    30İzleyin

    WordPress Ultimeter plugin <= 3.0.8 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    ben roberts · ultimeter6 gün önce

  • CVE-2026-95525
    26İzleyin

    WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    wedevs · wp user frontend6 gün önce

  • CVE-2026-95524
    21İzleyin

    WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    wedevs · wp user frontend6 gün önce

  • CVE-2026-95523
    26İzleyin

    WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    wedevs · wp user frontend6 gün önce

  • CVE-2026-95522
    30İzleyin

    WordPress Easy Digital Downloads plugin <= 3.7.0 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    syed balkhi · easy digital downloads6 gün önce

  • CVE-2026-94684
    26İzleyin

    WordPress Ocean Extra plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    oceanwp · ocean extra6 gün önce

  • CVE-2026-94682
    26İzleyin

    WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    secondlinethemes · podcast importer secondline6 gün önce

  • CVE-2026-94391
    26İzleyin

    WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    rustaurius · ultimate faq6 gün önce

  • CVE-2026-94179
    28İzleyin

    WordPress Razorpay Payment Button plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    razorpay · razorpay payment button6 gün önce

  • CVE-2026-94174
    30İzleyin

    WordPress Email Log plugin <= 2.63 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    webfactory · email log6 gün önce

  • CVE-2026-94124
    34İzleyin

    WordPress WP EasyCart plugin <= 5.9.4 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    levelfourdevelopment · wp easycart6 gün önce

  • CVE-2026-94079
    21İzleyin

    WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    wp user manager · wp user manager6 gün önce

  • CVE-2026-93773
    34İzleyin

    WordPress Mollie Forms plugin <= 2.11.0 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    nick van wobbie · mollie forms6 gün önce

  • CVE-2026-93622
    28İzleyin

    WordPress WPS Limit Login plugin <= 1.5.9.3 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    nicolaskulka · wps limit login6 gün önce

  • CVE-2026-93529
    26İzleyin

    WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    bilal naseer · wsp mcp &#8211; ai agents connector6 gün önce

  • CVE-2026-93527
    34İzleyin

    WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    bdthemes · live copy paste for elementor6 gün önce

  • CVE-2026-74002
    21İzleyin

    WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    wpdevelop · booking calendar17 Eyl 2026

  • CVE-2026-74000
    21İzleyin

    WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    wp.insider · simple membership17 Eyl 2026

  • CVE-2026-66631
    30İzleyin

    WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    moreconvert team · mc woocommerce wishlist17 Eyl 2026

  • CVE-2026-66630
    30İzleyin

    WordPress PublishPress Series plugin <= 3.1.3 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    publishpress · publishpress series17 Eyl 2026

  • CVE-2026-66628
    30İzleyin

    WordPress WP-Lister Lite for eBay plugin <= 3.8.11 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    wp lab · wp-lister lite for ebay17 Eyl 2026

  • CVE-2026-66626
    30İzleyin

    WordPress SKT Addons for Elementor plugin <= 4.0 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    sonal s sinha · skt addons for elementor17 Eyl 2026

  • CVE-2026-66625
    30İzleyin

    WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    wcvendors · wc vendors marketplace17 Eyl 2026

  • CVE-2026-66624
    30İzleyin

    WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    ludwig you · wpmastertoolkit17 Eyl 2026