Ayukiab
Patchstack Bug Bounty Program
18 kredili kayıt · son 12 ayda 18 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
21İzleyin | CVE-2026-62056İstismar yok | WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerabilitywp manageninja llc · fluent crm · CWE-862 | Orta5,3 | — | %0,2 | 30 Eki 2026 |
39İzleyin | CVE-2026-61992İstismar yok | WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerabilityvon eyal fitoussi · geo my wordpress · CWE-502 | Kritik9,8 | — | %0,3 | 29 Eki 2026 |
26İzleyin | CVE-2026-116850İstismar yok | WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerabilitywedevs · happy addons for elementor · CWE-79 | Orta6,5 | — | %0,1 | 29 Eki 2026 |
26İzleyin | CVE-2026-39735İstismar yok | WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerabilitycrocoblock · jetengine · CWE-862 | Orta6,5 | — | %0,2 | 29 Eki 2026 |
34İzleyin | CVE-2026-111850İstismar yok | WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerabilitybuddypress · buddypress · CWE-89 | Yüksek8,5 | — | %0,2 | 28 Eki 2026 |
34İzleyin | CVE-2026-115608İstismar yok | WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerabilitycrocoblock · jetengine · CWE-89 | Yüksek8,5 | — | %0,2 | 26 Eki 2026 |
28İzleyin | CVE-2026-112835İstismar yok | WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp · vikrentcar · CWE-79 | Yüksek7,1 | — | %0,1 | 23 Eki 2026 |
35İzleyin | CVE-2026-112836İstismar yok | WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerabilitye4jvikwp · vikrentcar · CWE-352 | Yüksek8,8 | — | %0,1 | 20 Eki 2026 |
26İzleyin | CVE-2026-111844İstismar yok | WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerabilitybrizy · brizy · CWE-79 | Orta6,5 | — | %0,2 | 20 Eki 2026 |
35İzleyin | CVE-2026-107436İstismar yok | WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerabilitywp chill · strong testimonials · CWE-502 | Yüksek8,8 | — | %0,4 | 18 Eki 2026 |
17İzleyin | CVE-2026-110371İstismar yok | WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerabilitywp chill · strong testimonials · CWE-862 | Orta4,3 | — | %0,1 | 15 Eki 2026 |
35İzleyin | CVE-2026-95534İstismar yok | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerabilityunlimited elements · unlimited elements for elementor (free widgets, addons, templates) · CWE-502 | Yüksek8,8 | — | %0,2 | 7 Eki 2026 |
28İzleyin | CVE-2026-94662İstismar yok | WordPress Unlimited Elements For Elementor plugin <= 2.0.19 - Cross Site Scripting (XSS) vulnerabilityunlimited elements · unlimited elements for elementor (free widgets, addons, templates) · CWE-79 | Yüksek7,1 | — | %0,1 | 7 Eki 2026 |
30İzleyin | CVE-2026-104385İstismar yok | WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerabilityadrian tobey · groundhogg · CWE-201 | Yüksek7,5 | — | %0,3 | 6 Eki 2026 |
26İzleyin | CVE-2026-105064İstismar yok | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerabilityunlimited elements · unlimited elements for elementor (free widgets, addons, templates) · CWE-470 | Orta6,5 | — | %0,2 | 5 Eki 2026 |
30İzleyin | CVE-2026-104408İstismar yok | WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerabilitygroundhogg · groundhogg · CWE-89 | Yüksek7,6 | — | %0,2 | 5 Eki 2026 |
34İzleyin | CVE-2026-103338İstismar yok | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerabilityunlimited elements · unlimited elements for elementor (free widgets, addons, templates) · CWE-89 | Yüksek8,5 | — | %0,2 | 1 Eki 2026 |
25İzleyin | CVE-2026-66608İstismar yok | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerabilityunlimited elements · unlimited elements for elementor (free widgets, addons, templates) · CWE-918 | Orta6,4 | — | %0,2 | 17 Eyl 2026 |
- CVE-2026-6205621İzleyin
WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wp manageninja llc · fluent crm30 Eki 2026
- CVE-2026-6199239İzleyin
WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0von eyal fitoussi · geo my wordpress29 Eki 2026
- CVE-2026-11685026İzleyin
WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wedevs · happy addons for elementor29 Eki 2026
- CVE-2026-3973526İzleyin
WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0crocoblock · jetengine29 Eki 2026
- CVE-2026-11185034İzleyin
WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0buddypress · buddypress28 Eki 2026
- CVE-2026-11560834İzleyin
WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0crocoblock · jetengine26 Eki 2026
- CVE-2026-11283528İzleyin
WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0e4jvikwp · vikrentcar23 Eki 2026
- CVE-2026-11283635İzleyin
WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0e4jvikwp · vikrentcar20 Eki 2026
- CVE-2026-11184426İzleyin
WordPress Brizy plugin 2.8.23 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0brizy · brizy20 Eki 2026
- CVE-2026-10743635İzleyin
WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0wp chill · strong testimonials18 Eki 2026
- CVE-2026-11037117İzleyin
WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0wp chill · strong testimonials15 Eki 2026
- CVE-2026-9553435İzleyin
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0unlimited elements · unlimited elements for elementor (free widgets, addons, templates)7 Eki 2026
- CVE-2026-9466228İzleyin
WordPress Unlimited Elements For Elementor plugin <= 2.0.19 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0unlimited elements · unlimited elements for elementor (free widgets, addons, templates)7 Eki 2026
- CVE-2026-10438530İzleyin
WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0adrian tobey · groundhogg6 Eki 2026
- CVE-2026-10506426İzleyin
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0unlimited elements · unlimited elements for elementor (free widgets, addons, templates)5 Eki 2026
- CVE-2026-10440830İzleyin
WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0groundhogg · groundhogg5 Eki 2026
- CVE-2026-10333834İzleyin
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0unlimited elements · unlimited elements for elementor (free widgets, addons, templates)1 Eki 2026
- CVE-2026-6660825İzleyin
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability
OrtaCVSS 6,4İstismar yokEPSS %0unlimited elements · unlimited elements for elementor (free widgets, addons, templates)17 Eyl 2026