endy
Patchstack Bug Bounty Program
15 kredili kayıt · son 12 ayda 15 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2026-84753Kavram kanıtı | WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerabilitywpfunnels · mail mint · CWE-502 | Kritik9,8 | — | %0,6 | 3 Eyl 2026 |
34İzleyin | CVE-2026-57385İstismar yok | WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerabilityappsbd · vitepos · CWE-89 | Yüksek8,5 | — | %0,4 | 13 Tem 2026 |
39İzleyin | CVE-2026-57331İstismar yok | WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerabilityvideowhisper · paid videochat turnkey site · CWE-22 | Kritik9,9 | — | %0,5 | 29 Haz 2026 |
26İzleyin | CVE-2026-57330İstismar yok | WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerabilitystylemix · masterstudy lms · CWE-79 | Orta6,5 | — | %0,2 | 29 Haz 2026 |
30İzleyin | CVE-2026-57647İstismar yok | WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerabilitybplugins · panorama viewer – 360 degree image + video viewer · CWE-98 | Yüksek7,5 | — | %0,4 | 26 Haz 2026 |
34İzleyin | CVE-2026-54822İstismar yok | WordPress SALESmanago & Leadoo plugin <= 3.11.2 - SQL Injection vulnerabilitysalesmanago · salesmanago & leadoo · CWE-89 | Yüksek8,5 | — | %0,4 | 25 Haz 2026 |
37İzleyin | CVE-2026-54812İstismar yok | WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerabilitystylemixthemes · motors · CWE-89 | Kritik9,3 | — | %0,4 | 17 Haz 2026 |
32İzleyin | CVE-2026-54814İstismar yok | WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerabilitystylemixthemes · motors · CWE-98 | Yüksek8,1 | — | %0,6 | 17 Haz 2026 |
39İzleyin | CVE-2026-49766İstismar yok | WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerabilitywp user manager · wp user manager · CWE-22 | Kritik9,9 | — | %0,5 | 15 Haz 2026 |
28İzleyin | CVE-2026-48867İstismar yok | WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerabilityexpresstech · quiz and survey master · CWE-79 | Yüksek7,1 | — | %0,3 | 15 Haz 2026 |
26İzleyin | CVE-2026-42662İstismar yok | WordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerabilityliquid web / stellarwp · event tickets · CWE-290 | Orta6,5 | — | %0,4 | 15 Haz 2026 |
28İzleyin | CVE-2026-42658İstismar yok | WordPress Classified Listing plugin <= 5.3.8 - Cross Site Scripting (XSS) vulnerabilitymamunur rashid · classified listing · CWE-79 | Yüksek7,1 | — | %0,3 | 15 Haz 2026 |
21İzleyin | CVE-2026-42657İstismar yok | WordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerabilitywasiliy strecker · contest gallery · CWE-1284 | Orta5,3 | — | %0,3 | 15 Haz 2026 |
26İzleyin | CVE-2026-42656İstismar yok | WordPress Contest Gallery plugin <= 28.1.6 - Cross Site Scripting (XSS) vulnerabilitywasiliy strecker · contest gallery · CWE-79 | Orta6,5 | — | %0,2 | 15 Haz 2026 |
37İzleyin | CVE-2026-42727İstismar yok | WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerabilityrealmag777 · active products tables for woocommerce · CWE-89 | Kritik9,3 | — | %0,4 | 27 May 2026 |
- CVE-2026-8475339İzleyin
WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %1wpfunnels · mail mint3 Eyl 2026
- CVE-2026-5738534İzleyin
WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0appsbd · vitepos13 Tem 2026
- CVE-2026-5733139İzleyin
WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability
KritikCVSS 9,9İstismar yokEPSS %1videowhisper · paid videochat turnkey site29 Haz 2026
- CVE-2026-5733026İzleyin
WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0stylemix · masterstudy lms29 Haz 2026
- CVE-2026-5764730İzleyin
WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0bplugins · panorama viewer – 360 degree image + video viewer26 Haz 2026
- CVE-2026-5482234İzleyin
WordPress SALESmanago & Leadoo plugin <= 3.11.2 - SQL Injection vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0salesmanago · salesmanago & leadoo25 Haz 2026
- CVE-2026-5481237İzleyin
WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0stylemixthemes · motors17 Haz 2026
- CVE-2026-5481432İzleyin
WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %1stylemixthemes · motors17 Haz 2026
- CVE-2026-4976639İzleyin
WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability
KritikCVSS 9,9İstismar yokEPSS %1wp user manager · wp user manager15 Haz 2026
- CVE-2026-4886728İzleyin
WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0expresstech · quiz and survey master15 Haz 2026
- CVE-2026-4266226İzleyin
WordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0liquid web / stellarwp · event tickets15 Haz 2026
- CVE-2026-4265828İzleyin
WordPress Classified Listing plugin <= 5.3.8 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0mamunur rashid · classified listing15 Haz 2026
- CVE-2026-4265721İzleyin
WordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0wasiliy strecker · contest gallery15 Haz 2026
- CVE-2026-4265626İzleyin
WordPress Contest Gallery plugin <= 28.1.6 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0wasiliy strecker · contest gallery15 Haz 2026
- CVE-2026-4272737İzleyin
WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokEPSS %0realmag777 · active products tables for woocommerce27 May 2026