İçeriğe atla
Noroxi

Hakiduck

Patchstack Bug Bounty Program

27 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2025-32137
    19İzleyin

    WordPress s2Member plugin <= 250419 - Local File Inclusion vulnerability

    OrtaCVSS 4,9İstismar yokEPSS %1

    cristián lávaque · s2member4 Nis 2025

  • CVE-2025-22665
    17İzleyin

    WordPress RapidLoad plugin <= 2.4.4 - Broken Access Control vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    shakeeb sadikeen · rapidload27 Mar 2025

  • CVE-2025-26988
    30İzleyin

    WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - SQL Injection vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %1

    cozyvision · sms alert order notifications3 Mar 2025

  • CVE-2025-26984
    24İzleyin

    WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    cozyvision · sms alert order notifications3 Mar 2025

  • CVE-2025-22349
    30İzleyin

    WordPress WordPress Auction Plugin plugin <= 3.7 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    wp marka · wordpress auction plugin7 Oca 2025

  • CVE-2024-54207
    23İzleyin

    WordPress WordPress Auction Plugin plugin <= 3.7 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    wp marka · wordpress auction plugin6 Ara 2024

  • CVE-2024-51815
    36İzleyin

    WordPress s2Member plugin <= 241114 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,0İstismar yokEPSS %0

    cristián lávaque · s2member6 Ara 2024

  • CVE-2024-51615
    37İzleyin

    WordPress WordPress Auction Plugin plugin <= 3.7 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    wp marka · wordpress auction plugin6 Ara 2024

  • CVE-2024-53788
    23İzleyin

    WordPress WordPress Portfolio Builder – Portfolio Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    portfoliohub · wordpress portfolio builder – portfolio gallery30 Kas 2024

  • CVE-2024-53783
    30İzleyin

    WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    anzar ahmed · ni woocommerce cost of goods30 Kas 2024

  • CVE-2024-52436
    28İzleyin

    WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    wpexperts · post smtp18 Kas 2024

  • CVE-2024-52434
    36İzleyin

    WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,1İstismar yokEPSS %1

    supsystic · popup18 Kas 2024

  • CVE-2024-52427
    35İzleyin

    WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    vollstart · event tickets with ticket scanner18 Kas 2024

  • CVE-2024-52393
    28İzleyin

    WordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %1

    podlove · podlove podcast publisher14 Kas 2024

  • CVE-2024-50409
    21İzleyin

    WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    kibokolabs · namaste\! lms29 Eki 2024

  • CVE-2024-50407
    24İzleyin

    WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    kibokolabs · namaste\! lms29 Eki 2024

  • CVE-2024-49691
    30İzleyin

    WordPress Product Filter by WBW plugin <= 2.7.0 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    wbw plugins · product filter by wbw24 Eki 2024

  • CVE-2024-49684
    28İzleyin

    WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %1

    revmakx · backup and staging by wp time capsule23 Eki 2024

  • CVE-2024-49244
    34İzleyin

    WordPress SV Product Import Export for WooCommerce plugin <= 1.0.0 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    vrinsoft · csv product import export for woocommerce17 Eki 2024

  • CVE-2024-47312
    34İzleyin

    WordPress Classic Editor and Classic Widgets plugin <= 1.4.1 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    wp grim · classic editor and classic widgets17 Eki 2024

  • CVE-2024-49271
    28İzleyin

    WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %1

    unlimited-elements · unlimited elements for elementor16 Eki 2024

  • CVE-2024-48042
    36İzleyin

    WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,1İstismar yokEPSS %1

    supsystic · contact form by supsystic16 Eki 2024

  • CVE-2024-48020
    34İzleyin

    WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    revmakx · backup and staging by wp time capsule11 Eki 2024

  • CVE-2024-47331
    39İzleyin

    WordPress Multi Step for Contact Form plugin <= 2.7.7 - Unauthenticated SQL Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    ninjateam · multi step for contact form 711 Eki 2024

  • CVE-2024-47350
    37İzleyin

    WordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    yithemes · yith woocommerce ajax search6 Eki 2024