devploit
Patchstack Bug Bounty Program
3 kredili kayıt · son 12 ayda 3 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
26İzleyin | CVE-2026-11367İstismar yok | PixMagix <= 1.7.2 - Authenticated (Author+) Path Traversal in 'layers[].id' Parameterandrasweb · pixmagix – wordpress image editor · CWE-22 | Orta6,5 | — | %0,8 | 30 Haz 2026 |
28İzleyin | CVE-2026-39447İstismar yok | WordPress Simply Schedule Appointments plugin <= 1.6.10.6 - Cross Site Scripting (XSS) vulnerabilitynsquared · simply schedule appointments · CWE-79 | Yüksek7,1 | — | %0,3 | 15 Haz 2026 |
26İzleyin | CVE-2026-42725İstismar yok | WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerabilitywp wham · checkout files upload for woocommerce · CWE-639 | Orta6,5 | — | %0,4 | 27 May 2026 |
- CVE-2026-1136726İzleyin
PixMagix <= 1.7.2 - Authenticated (Author+) Path Traversal in 'layers[].id' Parameter
OrtaCVSS 6,5İstismar yokEPSS %1andrasweb · pixmagix – wordpress image editor30 Haz 2026
- CVE-2026-3944728İzleyin
WordPress Simply Schedule Appointments plugin <= 1.6.10.6 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0nsquared · simply schedule appointments15 Haz 2026
- CVE-2026-4272526İzleyin
WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wp wham · checkout files upload for woocommerce27 May 2026