Anhchangmutrang
Patchstack Bug Bounty Program
65 kredili kayıt · son 12 ayda 3 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2025-46494İstismar yok | WordPress WidgetKit Pro plugin <= 1.13.1 - Reflected Cross Site Scripting (XSS) vulnerabilitythemesgrove · widgetkit pro · CWE-79 | Yüksek7,1 | — | %0,1 | 7 Oca 2026 |
17İzleyin | CVE-2025-31046İstismar yok | WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control Vulnerabilitywpvibes · anywhere elementor pro · CWE-862 | Orta4,3 | — | %0,1 | 5 Oca 2026 |
26İzleyin | CVE-2025-54748İstismar yok | WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerabilityromancode · mapsvg · CWE-22 | Orta6,5 | — | %0,3 | 18 Ara 2025 |
17İzleyin | CVE-2025-39465İstismar yok | WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerabilityflippercode · advanced google maps · CWE-862 | Orta4,3 | — | %0,2 | 6 Kas 2025 |
28İzleyin | CVE-2025-49430İstismar yok | WordPress Ultimate Video Player Plugin <= 10.1 - Server Side Request Forgery (SSRF) Vulnerabilityfwdesign · ultimate video player · CWE-918 | Yüksek7,2 | — | %0,2 | 9 Eyl 2025 |
17İzleyin | CVE-2025-58813İstismar yok | WordPress Consultstreet Theme <= 3.0.0 - Broken Access Control Vulnerabilitythemearile · consultstreet · CWE-862 | Orta4,3 | — | %0,2 | 5 Eyl 2025 |
28İzleyin | CVE-2025-54044İstismar yok | WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability_creativemedia_ · elite video player · CWE-79 | Yüksek7,1 | — | %0,2 | 20 Ağu 2025 |
21İzleyin | CVE-2025-49432İstismar yok | WordPress Ultimate Video Player Plugin <= 10.1 - Broken Access Control Vulnerabilityfwdesign · ultimate video player · CWE-862 | Orta5,3 | — | %0,3 | 15 Ağu 2025 |
34İzleyin | CVE-2025-39510İstismar yok | WordPress Pinterest Automatic Pin plugin < 4.19.0 - SQL Injection vulnerabilityvalvepress · pinterest automatic pin · CWE-89 | Yüksek8,5 | — | %0,3 | 14 Ağu 2025 |
28İzleyin | CVE-2025-46500İstismar yok | WordPress Wordpress Auto Spinner plugin <= 3.26.0 - Reflected Cross Site Scripting (XSS) vulnerabilityvalvepress · wordpress auto spinner · CWE-79 | Yüksek7,1 | — | %0,2 | 16 Tem 2025 |
25İzleyin | CVE-2025-47565İstismar yok | WordPress EventON plugin <= 4.9.9 - Broken Access Control vulnerabilityashanjay · eventon · CWE-862 | Orta6,3 | — | %0,2 | 4 Tem 2025 |
28İzleyin | CVE-2025-39487İstismar yok | WordPress Rankie plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerabilityvalvepress · rankie · CWE-79 | Yüksek7,1 | — | %0,2 | 4 Tem 2025 |
34İzleyin | CVE-2025-32297İstismar yok | WordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection Vulnerabilityquantumcloud · simple link directory · CWE-89 | Yüksek8,5 | — | %0,3 | 4 Tem 2025 |
19İzleyin | CVE-2025-49984İstismar yok | WordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) Vulnerabilityblubrry · powerpress podcasting · CWE-918 | Orta4,9 | — | %0,2 | 20 Haz 2025 |
39İzleyin | CVE-2025-47559İstismar yok | WordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerabilityromancode · mapsvg · CWE-434 | Kritik9,9 | — | %0,5 | 17 Haz 2025 |
34İzleyin | CVE-2025-39486İstismar yok | WordPress Rankie plugin < 1.8.2 - SQL Injection vulnerabilityvalvepress · rankie · CWE-89 | Yüksek8,5 | — | %0,3 | 17 Haz 2025 |
28İzleyin | CVE-2025-30988İstismar yok | WordPress Elite Video Player plugin <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability_creativemedia_ · elite video player · CWE-79 | Yüksek7,1 | — | %0,2 | 17 Haz 2025 |
35İzleyin | CVE-2025-47561İstismar yok | WordPress MapSVG plugin < 8.6.13 - Privilege Escalation Vulnerabilityromancode · mapsvg · CWE-266 | Yüksek8,8 | — | %0,3 | 9 Haz 2025 |
40Planlayın | CVE-2025-32291İstismar yok | WordPress SUMO Affiliates Pro plugin < 11.1.0 - Arbitrary File Upload vulnerabilityfantasticplugins · sumo affiliates pro · CWE-434 | Kritik10,0 | — | %0,5 | 9 Haz 2025 |
21İzleyin | CVE-2025-49294İstismar yok | WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Sensitive Data Exposure via Log Exposure vulnerabilitycoderevolution · crawlomatic multisite scraper post generator · CWE-201 | Orta5,3 | — | %0,3 | 6 Haz 2025 |
17İzleyin | CVE-2025-49293İstismar yok | WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Broken Access Control Vulnerabilitycoderevolution · crawlomatic multisite scraper post generator · CWE-862 | Orta4,3 | — | %0,2 | 6 Haz 2025 |
21İzleyin | CVE-2025-30986İstismar yok | WordPress Elite Video Player plugin <= 10.0.5 - Cross Site Request Forgery (CSRF) Vulnerability_creativemedia_ · elite video player · CWE-352 | Orta5,4 | — | %0,1 | 6 Haz 2025 |
17İzleyin | CVE-2025-4047İstismar yok | Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard Viewwpmudev · broken link checker · CWE-862 | Orta4,3 | — | %0,2 | 2 Haz 2025 |
30İzleyin | CVE-2025-47558İstismar yok | WordPress MapSVG plugin < 8.6.13 - Broken Access Control vulnerabilityromancode · mapsvg · CWE-862 | Yüksek7,5 | — | %0,4 | 23 May 2025 |
32İzleyin | CVE-2025-46444İstismar yok | WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerabilityscripteo · ads pro · CWE-98 | Yüksek8,1 | — | %0,8 | 23 May 2025 |
- CVE-2025-4649428İzleyin
WordPress WidgetKit Pro plugin <= 1.13.1 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0themesgrove · widgetkit pro7 Oca 2026
- CVE-2025-3104617İzleyin
WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0wpvibes · anywhere elementor pro5 Oca 2026
- CVE-2025-5474826İzleyin
WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0romancode · mapsvg18 Ara 2025
- CVE-2025-3946517İzleyin
WordPress Advanced Google Maps plugin <= 5.8.4 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0flippercode · advanced google maps6 Kas 2025
- CVE-2025-4943028İzleyin
WordPress Ultimate Video Player Plugin <= 10.1 - Server Side Request Forgery (SSRF) Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0fwdesign · ultimate video player9 Eyl 2025
- CVE-2025-5881317İzleyin
WordPress Consultstreet Theme <= 3.0.0 - Broken Access Control Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0themearile · consultstreet5 Eyl 2025
- CVE-2025-5404428İzleyin
WordPress Elite Video Player <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0_creativemedia_ · elite video player20 Ağu 2025
- CVE-2025-4943221İzleyin
WordPress Ultimate Video Player Plugin <= 10.1 - Broken Access Control Vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0fwdesign · ultimate video player15 Ağu 2025
- CVE-2025-3951034İzleyin
WordPress Pinterest Automatic Pin plugin < 4.19.0 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0valvepress · pinterest automatic pin14 Ağu 2025
- CVE-2025-4650028İzleyin
WordPress Wordpress Auto Spinner plugin <= 3.26.0 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0valvepress · wordpress auto spinner16 Tem 2025
- CVE-2025-4756525İzleyin
WordPress EventON plugin <= 4.9.9 - Broken Access Control vulnerability
OrtaCVSS 6,3İstismar yokEPSS %0ashanjay · eventon4 Tem 2025
- CVE-2025-3948728İzleyin
WordPress Rankie plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0valvepress · rankie4 Tem 2025
- CVE-2025-3229734İzleyin
WordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection Vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0quantumcloud · simple link directory4 Tem 2025
- CVE-2025-4998419İzleyin
WordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) Vulnerability
OrtaCVSS 4,9İstismar yokEPSS %0blubrry · powerpress podcasting20 Haz 2025
- CVE-2025-4755939İzleyin
WordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerability
KritikCVSS 9,9İstismar yokEPSS %0romancode · mapsvg17 Haz 2025
- CVE-2025-3948634İzleyin
WordPress Rankie plugin < 1.8.2 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0valvepress · rankie17 Haz 2025
- CVE-2025-3098828İzleyin
WordPress Elite Video Player plugin <= 10.0.5 - Cross Site Scripting (XSS) Vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0_creativemedia_ · elite video player17 Haz 2025
- CVE-2025-4756135İzleyin
WordPress MapSVG plugin < 8.6.13 - Privilege Escalation Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0romancode · mapsvg9 Haz 2025
- CVE-2025-3229140Planlayın
WordPress SUMO Affiliates Pro plugin < 11.1.0 - Arbitrary File Upload vulnerability
KritikCVSS 10,0İstismar yokEPSS %0fantasticplugins · sumo affiliates pro9 Haz 2025
- CVE-2025-4929421İzleyin
WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Sensitive Data Exposure via Log Exposure vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0coderevolution · crawlomatic multisite scraper post generator6 Haz 2025
- CVE-2025-4929317İzleyin
WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Broken Access Control Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0coderevolution · crawlomatic multisite scraper post generator6 Haz 2025
- CVE-2025-3098621İzleyin
WordPress Elite Video Player plugin <= 10.0.5 - Cross Site Request Forgery (CSRF) Vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0_creativemedia_ · elite video player6 Haz 2025
- CVE-2025-404717İzleyin
Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View
OrtaCVSS 4,3İstismar yokEPSS %0wpmudev · broken link checker2 Haz 2025
- CVE-2025-4755830İzleyin
WordPress MapSVG plugin < 8.6.13 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0romancode · mapsvg23 May 2025
- CVE-2025-4644432İzleyin
WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0scripteo · ads pro23 May 2025