İçeriğe atla
Noroxi

dutafi

Patchstack Bug Bounty Program

68 kredili kayıt · son 12 ayda 68 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2026-84814
    39İzleyin

    WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    bricksforge. · bricksforge3 Eyl 2026

  • CVE-2026-81295
    28İzleyin

    WordPress Under Construction plugin <= 5.82 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    underconstructionpage · under construction3 Eyl 2026

  • CVE-2026-81289
    28İzleyin

    WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    sonaar · mp3 audio player for music, radio & podcast by sonaar2 Eyl 2026

  • CVE-2026-81768
    28İzleyin

    WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    highwarden · super store finder31 Ağu 2026

  • CVE-2026-81760
    28İzleyin

    WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    crocoblock · jetengine28 Ağu 2026

  • CVE-2026-78281
    28İzleyin

    WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    codepeople · cp media player27 Ağu 2026

  • CVE-2026-32550
    34İzleyin

    WordPress Kadence Shop Kit plugin <= 3.0.6 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    liquid web, llc · kadence shop kit27 Ağu 2026

  • CVE-2026-78470
    26İzleyin

    WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL Injection

    OrtaCVSS 6,5İstismar yokEPSS %0

    wedevs · wp project manager pro25 Ağu 2026

  • CVE-2026-78264
    28İzleyin

    WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    site building with toolset · toolset blocks24 Ağu 2026

  • CVE-2026-32478
    34İzleyin

    WordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    wedevs pte. ltd · wp project manager pro24 Ağu 2026

  • CVE-2026-32476
    28İzleyin

    WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    amplebyte pvt limited · brave conversion engine (pro)24 Ağu 2026

  • CVE-2026-28166
    28İzleyin

    WordPress Tourmaster plugin <= 5.4.9 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    goodlayers · tourmaster24 Ağu 2026

  • CVE-2026-68566
    37İzleyin

    WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    repute infosystems · bookingpress appointment booking pro20 Ağu 2026

  • CVE-2026-66611
    28İzleyin

    WordPress Paymob for WooCommerce plugin <= 4.1.10 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    paymob · paymob for woocommerce20 Ağu 2026

  • CVE-2026-66609
    37İzleyin

    WordPress TheGem (Elementor) theme <= 5.12.3 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    codexthemes · thegem (elementor)20 Ağu 2026

  • CVE-2026-66598
    28İzleyin

    WordPress B2BKing Premium plugin <= 5.6.07 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    kingtech llc. · b2bking premium20 Ağu 2026

  • CVE-2026-66594
    34İzleyin

    WordPress WordPress Persistent Login plugin <= 3.1.0 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    lukeseager · wordpress persistent login20 Ağu 2026

  • CVE-2026-66581
    28İzleyin

    WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    crocoblock. jetimpex inc. · jetengine20 Ağu 2026

  • CVE-2026-73182
    28İzleyin

    WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    jeff starr · bbq pro19 Ağu 2026

  • CVE-2026-66613
    39İzleyin

    WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    crocoblock. jetimpex inc. · jetengine19 Ağu 2026

  • CVE-2026-32552
    34İzleyin

    WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    yith · yith woocommerce membership premium19 Ağu 2026

  • CVE-2026-74015
    37İzleyin

    WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    merkulove · readabler18 Ağu 2026

  • CVE-2026-73404
    26İzleyin

    WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    stylemix · masterstudy lms18 Ağu 2026

  • CVE-2026-73365
    37İzleyin

    WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    crocoblock. jetimpex inc. · jetappointment18 Ağu 2026

  • CVE-2026-73360
    28İzleyin

    WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    premio · chaty pro18 Ağu 2026