chuck

Patchstack Bug Bounty Program

5 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
26İzleyin	CVE-2025-28976İstismar yok	WordPress Email Address Security by WebEmailProtector plugin <= 3.3.6 - Cross Site Scripting (XSS) Vulnerabilitydsrodzin · email address security by webemailprotector · CWE-79 XSS	Orta6,5	—	%0,2	4 Tem 2025
39İzleyin	CVE-2025-48340İstismar yok	WordPress User Profile Meta Manager plugin <= 1.02 - CSRF to Privilege Escalation vulnerabilitydanny vink · user profile meta manager · CWE-352 Kimlik doğrulamasız CSRF	Kritik9,8	—	%0,2	19 May 2025
21İzleyin	CVE-2025-39545İstismar yok	WordPress REST API Authentication plugin <= 3.6.3 - Settings Change Vulnerabilityminiorange · wordpress rest api authentication · CWE-862 Erişim denetimi (IDOR)	Orta5,4	—	%0,5	16 Nis 2025
29İzleyin	CVE-2025-39544İstismar yok	WordPress WP Tools plugin <= 5.18 - CSRF to Arbitrary File Deletion vulnerabilitysminozzi · wp tools · CWE-352 Kimlik doğrulamasız Yol geçişi CSRF	Yüksek7,4	—	%0,3	16 Nis 2025
21İzleyin	CVE-2025-32246İstismar yok	WordPress 1-Click Backup & Restore Database plugin <= 1.0.3 - Broken Access Control Vulnerabilitytim nguyen · 1-click backup & restore database · CWE-862 Erişim denetimi (IDOR)	Orta5,4	—	%0,5	4 Nis 2025

CVE-2025-28976
26İzleyin
WordPress Email Address Security by WebEmailProtector plugin <= 3.3.6 - Cross Site Scripting (XSS) Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
- XSS
dsrodzin · email address security by webemailprotector4 Tem 2025
CVE-2025-48340
39İzleyin
WordPress User Profile Meta Manager plugin <= 1.02 - CSRF to Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
danny vink · user profile meta manager19 May 2025
CVE-2025-39545
21İzleyin
WordPress REST API Authentication plugin <= 3.6.3 - Settings Change Vulnerability
OrtaCVSS 5,4İstismar yokEPSS %1
- Erişim denetimi (IDOR)
miniorange · wordpress rest api authentication16 Nis 2025
CVE-2025-39544
29İzleyin
WordPress WP Tools plugin <= 5.18 - CSRF to Arbitrary File Deletion vulnerability
YüksekCVSS 7,4İstismar yokEPSS %0
sminozzi · wp tools16 Nis 2025
CVE-2025-32246
21İzleyin
WordPress 1-Click Backup & Restore Database plugin <= 1.0.3 - Broken Access Control Vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- Erişim denetimi (IDOR)
tim nguyen · 1-click backup & restore database4 Nis 2025