anhcd05
Patchstack Bug Bounty Program
9 kredili kayıt · son 12 ayda 9 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
26İzleyin | CVE-2026-95527İstismar yok | WordPress Conekta Payment Gateway plugin <= 6.2.4 - Broken Access Control vulnerabilityconekta group · conekta payment gateway · CWE-862 | Orta6,5 | — | %0,3 | 23 Eyl 2026 |
26İzleyin | CVE-2026-59559İstismar yok | WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerabilitythemewant · rt mega menu – mega menu builder for elementor & gutenberg · CWE-79 | Orta6,5 | — | %0,2 | 27 Tem 2026 |
34İzleyin | CVE-2026-65454İstismar yok | WordPress Quiz And Survey Master plugin <= 11.2.0 - SQL Injection vulnerabilityexpresstech systems · quiz and survey master · CWE-89 | Yüksek8,5 | — | %0,3 | 23 Tem 2026 |
17İzleyin | CVE-2026-9656İstismar yok | HubSpot All-In-One Marketing <= 11.3.62 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor Localized Scripthubspotdev · hubspot all-in-one marketing – forms, popups, live chat · CWE-200 | Orta4,3 | — | %0,2 | 17 Tem 2026 |
26İzleyin | CVE-2026-59523İstismar yok | WordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerabilitynsquared · simply schedule appointments · CWE-862 | Orta6,5 | — | %0,2 | 13 Tem 2026 |
28İzleyin | CVE-2026-57740İstismar yok | WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerabilityacymailing newsletter team · acymailing smtp newsletter · CWE-862 | Yüksek7,1 | — | %0,3 | 13 Tem 2026 |
35İzleyin | CVE-2026-57410İstismar yok | WordPress MailerPress plugin <= 2.0.2 - Privilege Escalation vulnerabilitymailerpress team · mailerpress · CWE-266 | Yüksek8,8 | — | %0,4 | 13 Tem 2026 |
34İzleyin | CVE-2026-56064İstismar yok | WordPress Tourfic plugin <= 2.22.5 - SQL Injection vulnerabilitythemefic · tourfic · CWE-89 | Yüksek8,5 | — | %0,3 | 26 Haz 2026 |
28İzleyin | CVE-2026-42762İstismar yok | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · vikbooking hotel booking engine & pms · CWE-79 | Yüksek7,1 | — | %0,1 | 27 May 2026 |
- CVE-2026-9552726İzleyin
WordPress Conekta Payment Gateway plugin <= 6.2.4 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0conekta group · conekta payment gateway23 Eyl 2026
- CVE-2026-5955926İzleyin
WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0themewant · rt mega menu – mega menu builder for elementor & gutenberg27 Tem 2026
- CVE-2026-6545434İzleyin
WordPress Quiz And Survey Master plugin <= 11.2.0 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0expresstech systems · quiz and survey master23 Tem 2026
- CVE-2026-965617İzleyin
HubSpot All-In-One Marketing <= 11.3.62 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor Localized Script
OrtaCVSS 4,3İstismar yokEPSS %0hubspotdev · hubspot all-in-one marketing – forms, popups, live chat17 Tem 2026
- CVE-2026-5952326İzleyin
WordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0nsquared · simply schedule appointments13 Tem 2026
- CVE-2026-5774028İzleyin
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0acymailing newsletter team · acymailing smtp newsletter13 Tem 2026
- CVE-2026-5741035İzleyin
WordPress MailerPress plugin <= 2.0.2 - Privilege Escalation vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0mailerpress team · mailerpress13 Tem 2026
- CVE-2026-5606434İzleyin
WordPress Tourfic plugin <= 2.22.5 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0themefic · tourfic26 Haz 2026
- CVE-2026-4276228İzleyin
WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0e4jvikwp · vikbooking hotel booking engine & pms27 May 2026