dodoh4t
Patchstack Bug Bounty Program
53 kredili kayıt · son 12 ayda 53 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
26İzleyin | CVE-2026-39767İstismar yok | WordPress WPBase Cache plugin <= 5.5.6 - Denial of Service Attack vulnerabilitybaseapp · wpbase cache · CWE-770 | Orta6,5 | — | %0,3 | 6 Eki 2026 |
28İzleyin | CVE-2026-39745İstismar yok | WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerabilitybestweblayout · contact form to db by bestwebsoft · CWE-79 | Yüksek7,1 | — | %0,2 | 6 Eki 2026 |
28İzleyin | CVE-2026-39724İstismar yok | WordPress HTTP Requests Manager plugin <= 1.3.11 - Cross Site Scripting (XSS) vulnerabilityveppa · http requests manager · CWE-79 | Yüksek7,1 | — | %0,2 | 6 Eki 2026 |
28İzleyin | CVE-2026-32581İstismar yok | WordPress Mooberry Book Manager plugin 4.16.2 - SQL Injection vulnerabilitymooberrydreams · mooberry book manager · CWE-89 | Yüksek7,1 | — | %0,2 | 6 Eki 2026 |
26İzleyin | CVE-2026-94498İstismar yok | WordPress AppMySite plugin <= 3.15.4 - Broken Access Control vulnerabilityappmysite · appmysite · CWE-862 | Orta6,5 | — | %0,3 | 23 Eyl 2026 |
26İzleyin | CVE-2026-81782İstismar yok | WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerabilityfahad mahmood · wp docs · CWE-79 | Orta6,5 | — | %0,2 | 10 Eyl 2026 |
26İzleyin | CVE-2026-81275İstismar yok | WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerabilityyouzify · youzify · CWE-22 | Orta6,5 | — | %0,4 | 10 Eyl 2026 |
26İzleyin | CVE-2026-66660İstismar yok | WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.5.1 - Broken Access Control vulnerabilityscott paterson · contact form 7 – paypal & stripe add-on · CWE-862 | Orta6,5 | — | %0,3 | 13 Ağu 2026 |
30İzleyin | CVE-2026-59532İstismar yok | WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerabilitymagepeopleteam · booking and rental manager · CWE-1284 | Yüksek7,5 | — | %0,3 | 27 Tem 2026 |
30İzleyin | CVE-2026-59531İstismar yok | WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerabilityanh tran · falcon – wordpress optimizations & tweaks · CWE-1284 | Yüksek7,5 | — | %0,4 | 27 Tem 2026 |
26İzleyin | CVE-2026-57808İstismar yok | WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerabilitysaad iqbal · wp easypay · CWE-862 | Orta6,5 | — | %0,2 | 23 Tem 2026 |
37İzleyin | CVE-2026-61949İstismar yok | WordPress Bookly plugin <= 27.7 - SQL Injection vulnerabilitybookly · bookly · CWE-89 | Kritik9,3 | — | %0,4 | 23 Tem 2026 |
34İzleyin | CVE-2026-57772İstismar yok | WordPress WP Inventory Manager plugin <= 2.4.0 - SQL Injection vulnerabilitywp inventory · wp inventory manager · CWE-89 | Yüksek8,5 | — | %0,3 | 13 Tem 2026 |
28İzleyin | CVE-2026-57417İstismar yok | WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerabilityrextheme · cart lift · CWE-79 | Yüksek7,1 | — | %0,2 | 13 Tem 2026 |
26İzleyin | CVE-2026-57412İstismar yok | WordPress Gift Vouchers plugin <= 4.6.9 - Broken Access Control vulnerabilitycodemenschen · gift vouchers · CWE-862 | Orta6,5 | — | %0,3 | 13 Tem 2026 |
28İzleyin | CVE-2026-57407İstismar yok | WordPress PDF Generator for WordPress plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerabilitywp swings · pdf generator for wordpress · CWE-918 | Yüksek7,2 | — | %0,2 | 13 Tem 2026 |
28İzleyin | CVE-2026-57379İstismar yok | WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerabilitywppool · formychat · CWE-79 | Yüksek7,1 | — | %0,2 | 13 Tem 2026 |
26İzleyin | CVE-2026-57377İstismar yok | WordPress WowAddons plugin <= 1.6.8 - Broken Access Control vulnerabilitywpxpo · wowaddons · CWE-862 | Orta6,5 | — | %0,3 | 13 Tem 2026 |
26İzleyin | CVE-2026-57364İstismar yok | WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerabilitywpdeveloper · better payment – instant payments, donations, fundraising with subscriptions & more · CWE-1284 | Orta6,5 | — | %0,3 | 13 Tem 2026 |
35İzleyin | CVE-2026-57766İstismar yok | WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerabilityxplodedthemes · wpide – file manager & code editor · CWE-352 | Yüksek8,8 | — | %0,2 | 2 Tem 2026 |
35İzleyin | CVE-2026-57759İstismar yok | WordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerabilitymetagauss · profilegrid · CWE-352 | Yüksek8,8 | — | %0,2 | 2 Tem 2026 |
28İzleyin | CVE-2026-57758İstismar yok | WordPress Permalink Manager for WooCommerce plugin <= 1.0.8.2 - CSRF to Stored XSS vulnerabilityberocket · permalink manager for woocommerce · CWE-352 | Yüksek7,1 | — | %0,1 | 2 Tem 2026 |
25İzleyin | CVE-2026-57681İstismar yok | WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerabilitypaolo · geodirectory · CWE-918 | Orta6,4 | — | %0,2 | 2 Tem 2026 |
28İzleyin | CVE-2026-57345İstismar yok | WordPress Internal Links Manager plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerabilitywebraketen · internal links manager · CWE-79 | Yüksek7,1 | — | %0,2 | 2 Tem 2026 |
26İzleyin | CVE-2026-57342İstismar yok | WordPress ShortPixel Adaptive Images plugin <= 3.11.3 - Cross Site Scripting (XSS) vulnerabilityshortpixel · shortpixel adaptive images · CWE-79 | Orta6,5 | — | %0,2 | 2 Tem 2026 |
- CVE-2026-3976726İzleyin
WordPress WPBase Cache plugin <= 5.5.6 - Denial of Service Attack vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0baseapp · wpbase cache6 Eki 2026
- CVE-2026-3974528İzleyin
WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0bestweblayout · contact form to db by bestwebsoft6 Eki 2026
- CVE-2026-3972428İzleyin
WordPress HTTP Requests Manager plugin <= 1.3.11 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0veppa · http requests manager6 Eki 2026
- CVE-2026-3258128İzleyin
WordPress Mooberry Book Manager plugin 4.16.2 - SQL Injection vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0mooberrydreams · mooberry book manager6 Eki 2026
- CVE-2026-9449826İzleyin
WordPress AppMySite plugin <= 3.15.4 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0appmysite · appmysite23 Eyl 2026
- CVE-2026-8178226İzleyin
WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0fahad mahmood · wp docs10 Eyl 2026
- CVE-2026-8127526İzleyin
WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0youzify · youzify10 Eyl 2026
- CVE-2026-6666026İzleyin
WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.5.1 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0scott paterson · contact form 7 – paypal & stripe add-on13 Ağu 2026
- CVE-2026-5953230İzleyin
WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0magepeopleteam · booking and rental manager27 Tem 2026
- CVE-2026-5953130İzleyin
WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0anh tran · falcon – wordpress optimizations & tweaks27 Tem 2026
- CVE-2026-5780826İzleyin
WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0saad iqbal · wp easypay23 Tem 2026
- CVE-2026-6194937İzleyin
WordPress Bookly plugin <= 27.7 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0bookly · bookly23 Tem 2026
- CVE-2026-5777234İzleyin
WordPress WP Inventory Manager plugin <= 2.4.0 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0wp inventory · wp inventory manager13 Tem 2026
- CVE-2026-5741728İzleyin
WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0rextheme · cart lift13 Tem 2026
- CVE-2026-5741226İzleyin
WordPress Gift Vouchers plugin <= 4.6.9 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0codemenschen · gift vouchers13 Tem 2026
- CVE-2026-5740728İzleyin
WordPress PDF Generator for WordPress plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0wp swings · pdf generator for wordpress13 Tem 2026
- CVE-2026-5737928İzleyin
WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wppool · formychat13 Tem 2026
- CVE-2026-5737726İzleyin
WordPress WowAddons plugin <= 1.6.8 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wpxpo · wowaddons13 Tem 2026
- CVE-2026-5736426İzleyin
WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other Vulnerability Type vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wpdeveloper · better payment – instant payments, donations, fundraising with subscriptions & more13 Tem 2026
- CVE-2026-5776635İzleyin
WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0xplodedthemes · wpide – file manager & code editor2 Tem 2026
- CVE-2026-5775935İzleyin
WordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0metagauss · profilegrid2 Tem 2026
- CVE-2026-5775828İzleyin
WordPress Permalink Manager for WooCommerce plugin <= 1.0.8.2 - CSRF to Stored XSS vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0berocket · permalink manager for woocommerce2 Tem 2026
- CVE-2026-5768125İzleyin
WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability
OrtaCVSS 6,4İstismar yokEPSS %0paolo · geodirectory2 Tem 2026
- CVE-2026-5734528İzleyin
WordPress Internal Links Manager plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0webraketen · internal links manager2 Tem 2026
- CVE-2026-5734226İzleyin
WordPress ShortPixel Adaptive Images plugin <= 3.11.3 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0shortpixel · shortpixel adaptive images2 Tem 2026